last executing test programs: 5.559226253s ago: executing program 1 (id=11354): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @local}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000280)={0x8, {{0x2, 0x4e1f, @multicast1}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) 4.690760625s ago: executing program 4 (id=11359): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 4.672537462s ago: executing program 1 (id=11360): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) 4.419350427s ago: executing program 1 (id=11364): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) 4.282132145s ago: executing program 1 (id=11368): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 2.393822627s ago: executing program 3 (id=11389): set_mempolicy(0x3, &(0x7f00000002c0)=0x6, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.175019262s ago: executing program 2 (id=11391): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x91ea6c12f182535) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.010924288s ago: executing program 2 (id=11393): unshare(0x2a020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) 1.834182506s ago: executing program 3 (id=11395): r0 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) exit(0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001380)='>', 0x1}], 0x1}, 0x4000000) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) 1.708760193s ago: executing program 0 (id=11397): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8) unlinkat(r1, &(0x7f0000000280)='./bus\x00', 0x200) 1.675868306s ago: executing program 2 (id=11398): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) 1.620966879s ago: executing program 0 (id=11399): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) write(r0, &(0x7f0000000000)="7438e828dcfb7be314e66a", 0xb) 1.567750751s ago: executing program 4 (id=11400): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000001540)={&(0x7f00004a0000/0x1000)=nil, 0x1000}) 1.456704249s ago: executing program 4 (id=11401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x6, 0x0, 0x2000000, 0x1, 0x2000000, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x5, 0x0, 0x8001, 0x0, 0xfffffff7, 0x1ff, 0x0, 0xfffffffc, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0x2, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x3, 0x0, 0xfffffffc, 0x1, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_RATE64={0xc, 0x4, 0xec73e2f8611702aa}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 1.363154321s ago: executing program 0 (id=11402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000001800038008000400000000000800020009000000040001"], 0x44}}, 0x0) 1.293567626s ago: executing program 4 (id=11403): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f00000002c0)={{0x4, 0x40000, 0x4, 0xcc, 0x0, 0x4, 0x3, 0x8f, 0x5, 0x2, 0x4b, 0xd}, {0x26000, 0xe000, 0x3, 0xc, 0xa, 0xa3, 0x5, 0x3, 0x7, 0xba, 0x0, 0x7}, {0x4000, 0xc000, 0x10, 0x5, 0x3, 0xfe, 0x5, 0x2, 0x5, 0x98, 0xc, 0x6}, {0x30000, 0xfec00000, 0xf, 0x7, 0x8, 0x0, 0xf, 0x3, 0xc9, 0x8, 0xd7, 0xd5}, {0x5f000, 0xd000, 0x4, 0x5, 0x9, 0x1, 0x5, 0x6, 0x39, 0x24, 0xe, 0x4}, {0x70000, 0x50000, 0xd, 0x6, 0x9, 0x4, 0x0, 0x0, 0x5, 0xb, 0x7f, 0x80}, {0x70000, 0x1000, 0xf, 0x3c, 0xe8, 0x5, 0x6, 0x2, 0x3, 0xfa, 0x3, 0x4}, {0x58000, 0x50000, 0x10, 0xc, 0x80, 0x2, 0x5, 0x7, 0x6, 0xa6, 0x4, 0x9}, {0x8000000, 0xdc7}, {0x4000, 0xb6c1}, 0x80040000, 0x0, 0x4, 0x40, 0xc, 0x15901, 0xfec00000, 0x0, [0x100, 0x9, 0x6, 0x9]}) 1.219714242s ago: executing program 0 (id=11404): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.074646469s ago: executing program 1 (id=11405): munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000034d000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 1.07356225s ago: executing program 4 (id=11406): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty, 0x40000000}, 0x1c) 914.482165ms ago: executing program 3 (id=11407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) 844.285413ms ago: executing program 2 (id=11408): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000173000/0x4000)=nil, 0x4000, 0x3) 687.840234ms ago: executing program 3 (id=11409): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2}) fcntl$setsig(r0, 0xa, 0x1c) 624.874311ms ago: executing program 3 (id=11410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 147.988996ms ago: executing program 4 (id=11411): mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) 147.161044ms ago: executing program 0 (id=11421): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x15, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) 124.394347ms ago: executing program 1 (id=11412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x201, 0x70bd27, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x8e, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x0) 123.565ms ago: executing program 2 (id=11413): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 123.340124ms ago: executing program 3 (id=11414): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="37df163529da2d3cc1edfe1fcc09c9499f16c7", 0x13}], 0x1}}], 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 33.491761ms ago: executing program 2 (id=11415): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0) 0s ago: executing program 0 (id=11416): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) kernel console output (not intermixed with test programs): d=0 gid=0 ses=4294967295 subj=unconfined pid=24128 comm="syz.1.8604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2be9d8f749 code=0x0 [ 554.336493][ T5885] koneplus 0003:1E7D:2D51.0070: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 554.756248][ T5816] usb 4-1: USB disconnect, device number 88 [ 555.762498][ T5816] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 555.925245][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 555.935922][ T5816] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 555.946052][ T5816] usb 2-1: config 0 has no interface number 0 [ 555.963025][ T5816] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 555.973227][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.981957][ T5816] usb 2-1: Product: syz [ 555.987032][ T5816] usb 2-1: Manufacturer: syz [ 555.991662][ T5816] usb 2-1: SerialNumber: syz [ 556.003154][ T5816] usb 2-1: config 0 descriptor?? [ 556.017487][ T5816] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 556.030889][ T5816] pctv452e: pctv452e_power_ctrl: 1 [ 556.030889][ T5816] [ 556.039359][ T5816] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 556.039359][ T5816] [ 556.050260][ T5816] dvb-usb: bulk message failed: -22 (5/0) [ 556.059847][ T5816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 556.080257][ T5816] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 556.089149][ T5816] usb 2-1: media controller created [ 556.099392][ T5816] dvb-usb: bulk message failed: -22 (8/0) [ 556.115665][ T5816] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 556.124032][ T5816] dvb-usb: MAC address reading failed. [ 556.153224][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.247878][ T5816] DVB: Unable to find symbol stb0899_attach() [ 556.256981][ T5816] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 556.269781][T24156] dvb-usb: bulk message failed: -22 (7/0) [ 556.308250][T24156] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 556.375341][ T5816] rc_core: IR keymap rc-tt-1500 not found [ 556.383365][ T5816] Registered IR keymap rc-empty [ 556.399902][ T5816] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 556.434065][ T5816] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input59 [ 556.446847][ T5816] dvb-usb: schedule remote query interval to 100 msecs. [ 556.457701][ T5816] pctv452e: pctv452e_power_ctrl: 0 [ 556.457701][ T5816] [ 556.467849][ T5816] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 556.498693][ T5816] usb 2-1: USB disconnect, device number 58 [ 556.604576][ T5816] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 557.141032][T24202] loop4: detected capacity change from 0 to 1 [ 557.164997][T24202] Dev loop4: unable to read RDB block 1 [ 557.170644][T24202] loop4: unable to read partition table [ 557.200170][T24202] loop4: partition table beyond EOD, truncated [ 557.207354][T24202] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 557.425308][T24206] kvm: kvm [24205]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x7fffffff [ 557.973380][T24221] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8638'. [ 559.494156][T24281] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8668'. [ 559.515785][T24280] netlink: 504 bytes leftover after parsing attributes in process `syz.4.8669'. [ 559.923083][T24291] cifs: Unknown parameter 'fd' [ 559.985425][T24293] dvmrp1: tun_chr_ioctl cmd 1074025680 [ 561.169590][T24332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.159475][T24402] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 563.166434][T24402] pim6reg0: owner set to 0 [ 564.417819][ T5885] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 564.595311][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.614486][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 564.643958][ T5885] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 564.663864][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.693804][ T5885] usb 2-1: config 0 descriptor?? [ 565.203601][ T5885] kovaplus 0003:1E7D:2D50.0071: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 565.592107][ T5885] kovaplus 0003:1E7D:2D50.0071: couldn't init struct kovaplus_device [ 565.604466][ T5885] kovaplus 0003:1E7D:2D50.0071: couldn't install mouse [ 565.623493][ T5885] kovaplus 0003:1E7D:2D50.0071: probe with driver kovaplus failed with error -71 [ 565.700311][ T5885] usb 2-1: USB disconnect, device number 59 [ 566.174557][T24491] raw_sendmsg: syz.3.8760 forgot to set AF_INET. Fix it! [ 566.198093][T24493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8761'. [ 566.596106][T24512] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8770'. [ 567.672512][ T5816] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 567.834622][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.847280][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.857680][ T5816] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 567.868049][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.883515][ T5816] usb 4-1: config 0 descriptor?? [ 568.178376][T24566] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8793'. [ 568.269112][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.275719][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.333846][ T5816] sony 0003:054C:024B.0072: unknown main item tag 0x0 [ 568.340805][ T5816] sony 0003:054C:024B.0072: unknown main item tag 0x0 [ 568.362906][ T5816] sony 0003:054C:024B.0072: unexpected long global item [ 568.377174][ T5816] sony 0003:054C:024B.0072: parse failed [ 568.390165][ T5816] sony 0003:054C:024B.0072: probe with driver sony failed with error -22 [ 568.527659][ T5885] usb 4-1: USB disconnect, device number 89 [ 568.830991][T24584] netlink: 'syz.4.8801': attribute type 15 has an invalid length. [ 569.515660][T24602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.835613][ T5885] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 570.993161][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 571.004800][ T5885] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 571.015173][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.050484][ T5885] usb 4-1: config 0 descriptor?? [ 571.067431][ T5885] as10x_usb: device has been detected [ 571.084016][ T5885] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 571.125732][ T5885] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 571.169110][ T5885] as10x_usb: error during firmware upload part1 [ 571.177247][ T5885] Registered device nBox DVB-T Dongle [ 571.283025][ T5816] usb 4-1: USB disconnect, device number 90 [ 571.336232][ T5816] Unregistered device nBox DVB-T Dongle [ 571.343550][ T5816] as10x_usb: device has been disconnected [ 571.555308][T24638] netlink: 'syz.1.8827': attribute type 25 has an invalid length. [ 571.564217][T24638] netlink: 'syz.1.8827': attribute type 3 has an invalid length. [ 571.973651][ T30] audit: type=1800 audit(1764464770.794:6065): pid=24652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8832" name=19 dev="tmpfs" ino=8680 res=0 errno=0 [ 577.192675][T24792] kvm: kvm [24791]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 579.303565][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8909'. [ 579.497402][T24844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8915'. [ 579.510989][T24844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8915'. [ 579.570536][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8916'. [ 579.624478][T24847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.637887][T24847] bond0: (slave bond2): Enslaving as an active interface with an up link [ 579.760151][T24857] ipvlan2: entered promiscuous mode [ 580.117832][T24871] netlink: 'syz.1.8925': attribute type 11 has an invalid length. [ 580.126258][T24871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8925'. [ 580.136664][T24871] netlink: 'syz.1.8925': attribute type 11 has an invalid length. [ 580.144782][T24871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8925'. [ 580.357626][T24882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8930'. [ 581.537664][T24922] use of bytesused == 0 is deprecated and will be removed in the future, [ 581.547246][T24922] use the actual size instead. [ 581.810192][T24935] xt_hashlimit: max too large, truncated to 1048576 [ 583.057557][T24984] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8974'. [ 583.604762][T24999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.009458][T25020] io-wq is not configured for unbound workers [ 584.204264][T25030] binder: 25029:25030 ioctl c018620c 200000000040 returned -1 [ 584.230480][ T5915] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 584.395090][ T5915] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 584.411583][T25042] tipc: New replicast peer: 255.255.255.255 [ 584.421518][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.423207][T25042] tipc: Enabled bearer , priority 0 [ 584.481308][T25042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9002'. [ 584.514395][T25042] tipc: Disabling bearer [ 584.824620][ T5816] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 584.983711][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 584.994601][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.005428][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 585.015786][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.027501][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.040288][ T5915] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 585.073414][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 585.081476][ T5915] usb 2-1: Product: syz [ 585.093416][ T5915] usb 2-1: Manufacturer: syz [ 585.131851][ T5915] cdc_wdm 2-1:1.0: skipping garbage [ 585.159454][ T5915] cdc_wdm 2-1:1.0: skipping garbage [ 585.187599][ T5915] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 585.207274][ T5915] cdc_wdm 2-1:1.0: Unknown control protocol [ 585.232461][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.244922][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.258018][ T5816] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 585.267145][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.529192][ T5816] usb 4-1: config 0 descriptor?? [ 585.601227][ T5915] usb 2-1: USB disconnect, device number 60 [ 585.947938][ T5816] hid-u2fzero 0003:10C4:8ACF.0073: unknown main item tag 0x0 [ 585.955991][ T5816] hid-u2fzero 0003:10C4:8ACF.0073: unknown main item tag 0x0 [ 585.964259][ T5816] hid-u2fzero 0003:10C4:8ACF.0073: item fetching failed at offset 2/5 [ 585.973911][ T5816] hid-u2fzero 0003:10C4:8ACF.0073: probe with driver hid-u2fzero failed with error -22 [ 586.170138][ T5915] usb 4-1: USB disconnect, device number 91 [ 588.742602][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 588.754012][ T5953] usb 2-1: [UEAGLE-ATM] firmware is not available [ 590.122508][T25176] vcan0: tx address claim with dest, not broadcast [ 590.410359][T25186] program syz.0.9068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.646353][T25243] program syz.3.9095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.235280][T25272] netlink: 'syz.4.9108': attribute type 2 has an invalid length. [ 592.245622][T25272] netlink: 16158 bytes leftover after parsing attributes in process `syz.4.9108'. [ 592.356248][ T194] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.373221][ T194] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.395659][ T194] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.435693][ T194] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.713332][ T5915] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 592.873600][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 592.884808][ T5915] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 592.910015][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 592.922741][ T5915] usb 4-1: Product: syz [ 592.926980][ T5915] usb 4-1: Manufacturer: syz [ 592.943288][ T5915] usb 4-1: SerialNumber: syz [ 592.974188][ T5915] usb 4-1: config 0 descriptor?? [ 593.227911][ T5915] usb 4-1: USB disconnect, device number 92 [ 594.092439][ T5816] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 594.245652][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 594.262463][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 594.274739][ T5816] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 594.284245][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.295658][ T5816] usb 4-1: config 0 descriptor?? [ 594.301570][T25321] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 594.734088][ T5816] cypress 0003:04B4:DE64.0074: item fetching failed at offset 0/3 [ 594.744561][ T5816] cypress 0003:04B4:DE64.0074: parse failed [ 594.750580][ T5816] cypress 0003:04B4:DE64.0074: probe with driver cypress failed with error -22 [ 594.932211][ T5816] usb 4-1: USB disconnect, device number 93 [ 595.575304][ T30] audit: type=1804 audit(1764464794.394:6066): pid=25369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9150" name="/newroot/1924/file1" dev="tmpfs" ino=9692 res=1 errno=0 [ 595.963677][T25379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9156'. [ 598.053494][ T5915] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 598.203973][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 598.217401][ T5915] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 598.227563][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.238241][ T5915] usb 2-1: Product: syz [ 598.243538][ T5915] usb 2-1: Manufacturer: syz [ 598.248298][ T5915] usb 2-1: SerialNumber: syz [ 598.264869][ T5915] usb 2-1: config 0 descriptor?? [ 598.275645][ T5915] usb 2-1: bad CDC descriptors [ 598.281876][ T5915] usb 2-1: unsupported MDLM descriptors [ 598.325647][T25461] binder: 25460:25461 ioctl c018620c 200000000000 returned -22 [ 598.491319][ T5915] usb 2-1: USB disconnect, device number 61 [ 598.806581][T25477] netem: incorrect ge model size [ 598.811686][T25477] netem: change failed [ 599.092735][ T5816] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 599.244522][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.255708][ T5816] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 599.264888][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.275381][ T5816] usb 4-1: config 0 descriptor?? [ 599.312599][ T5953] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 599.472464][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 599.479605][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.491039][ T5953] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 599.500549][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.511602][ T5816] usbhid 4-1:0.0: can't add hid device: -71 [ 599.518650][ T5953] usb 2-1: config 0 descriptor?? [ 599.523990][ T5816] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 599.536210][ T5816] usb 4-1: USB disconnect, device number 94 [ 599.730452][T25484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9201'. [ 599.960160][ T5953] mcp2221 0003:04D8:00DD.0075: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 600.032505][ T5816] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 600.206515][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 600.217998][ T5816] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 600.227652][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.243487][ T5816] usb 4-1: config 0 descriptor?? [ 600.278180][ T5816] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input60 [ 600.308716][T25491] VFS: Mount too revealing [ 600.370578][ T5915] usb 2-1: USB disconnect, device number 62 [ 600.472286][ C0] usb 4-1: unknown answer from device [ 600.478621][ C0] input input60: Pen battery low [ 600.682745][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 600.690199][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 600.697556][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 600.705583][ T5183] usb 4-1: control msg error: -71 [ 600.713401][ C0] usb 4-1: pegasus_irq - urb shutting down with status: -2 [ 600.736101][ T5915] usb 4-1: USB disconnect, device number 95 [ 602.069358][T25545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9229'. [ 602.215418][T25552] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 602.404772][T25558] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 602.596095][T25569] loop4: detected capacity change from 0 to 1 [ 602.633546][ T5966] Dev loop4: unable to read RDB block 1 [ 602.641447][ T5966] loop4: unable to read partition table [ 602.651266][T25565] bond0: entered promiscuous mode [ 602.657285][ T5966] loop4: partition table beyond EOD, truncated [ 602.678495][T25569] Dev loop4: unable to read RDB block 1 [ 602.688582][T25569] loop4: unable to read partition table [ 602.704762][T25569] loop4: partition table beyond EOD, truncated [ 602.711192][T25569] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 602.762516][ T5198] Dev loop4: unable to read RDB block 1 [ 602.768321][ T5198] loop4: unable to read partition table [ 602.783817][ T5198] loop4: partition table beyond EOD, truncated [ 604.792130][T25632] vivid-000: disconnect [ 604.811755][T25630] vivid-000: reconnect [ 605.620441][T25658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9277'. [ 605.633116][T25658] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9277'. [ 605.674789][T25660] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9278'. [ 606.057923][T25671] netlink: 'syz.0.9283': attribute type 1 has an invalid length. [ 606.084969][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9283'. [ 606.404445][T25680] sctp: [Deprecated]: syz.0.9287 (pid 25680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 606.404445][T25680] Use struct sctp_sack_info instead [ 608.823784][T25735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9311'. [ 609.079527][ T5953] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 609.273241][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 609.291406][ T5953] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 609.309900][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.340682][ T5953] usb 4-1: config 0 descriptor?? [ 609.784663][ T5953] logitech 0003:046D:C29C.0076: unknown main item tag 0x0 [ 609.805131][ T5953] logitech 0003:046D:C29C.0076: unknown main item tag 0x0 [ 609.829498][ T5953] logitech 0003:046D:C29C.0076: unknown main item tag 0x0 [ 609.850098][ T5953] logitech 0003:046D:C29C.0076: unknown main item tag 0x0 [ 609.870550][ T5953] logitech 0003:046D:C29C.0076: unknown main item tag 0x0 [ 609.911528][ T5953] logitech 0003:046D:C29C.0076: unknown main item tag 0x0 [ 609.939209][ T5953] logitech 0003:046D:C29C.0076: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 610.180299][ T5953] logitech 0003:046D:C29C.0076: no inputs found [ 610.222835][ T5953] usb 4-1: USB disconnect, device number 96 [ 610.568136][T25779] binder: 25777:25779 ioctl c0306201 200000000640 returned -22 [ 610.957851][T25796] input: syz1 as /devices/virtual/input/input61 [ 611.413113][ T5915] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 611.575371][ T5915] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 611.584429][ T5915] usb 4-1: config 0 has no interface number 0 [ 611.590584][ T5915] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.622991][ T5915] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.642395][ T5915] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.669296][ T5915] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 611.693962][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.714237][ T5915] usb 4-1: config 0 descriptor?? [ 612.360275][ T5915] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0077/input/input62 [ 612.454781][ T5915] uclogic 0003:28BD:0042.0077: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 612.548841][ T5915] usb 4-1: USB disconnect, device number 97 [ 612.838618][T25850] ip6gretap1: entered allmulticast mode [ 613.055437][T25859] hsr0: entered allmulticast mode [ 613.072806][T25859] hsr_slave_0: entered allmulticast mode [ 613.078699][T25859] hsr_slave_1: entered allmulticast mode [ 613.359376][T25870] vxcan1: entered allmulticast mode [ 613.370642][T25870] vxcan1: left allmulticast mode [ 613.483240][ T5915] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 613.647687][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.663196][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 613.685561][ T5915] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 613.703928][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 613.733456][ T5915] usb 4-1: SerialNumber: syz [ 613.965394][ T5915] usb 4-1: 0:2 : does not exist [ 613.988798][ T5915] usb 4-1: USB disconnect, device number 98 [ 614.027256][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.922279][T25910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9385'. [ 615.139648][T25920] loop5: detected capacity change from 0 to 7 [ 615.155574][ C1] blk_print_req_error: 10 callbacks suppressed [ 615.155598][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.171056][ C1] buffer_io_error: 10 callbacks suppressed [ 615.171077][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 615.185908][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.195138][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 615.203981][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.213257][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 615.223499][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.232750][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 615.242532][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.251865][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 615.261181][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.270476][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 615.279034][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.288459][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 615.296755][ T5966] ldm_validate_partition_table(): Disk read failed. [ 615.307860][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.317134][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 615.326485][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.335742][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 615.344701][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.354024][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 615.364002][ T5966] Dev loop5: unable to read RDB block 0 [ 615.370423][ T5966] loop5: unable to read partition table [ 615.377021][ T5966] loop5: partition table beyond EOD, truncated [ 615.403907][T25920] ldm_validate_partition_table(): Disk read failed. [ 615.411499][T25920] Dev loop5: unable to read RDB block 0 [ 615.421543][T25920] loop5: unable to read partition table [ 615.428708][T25920] loop5: partition table beyond EOD, truncated [ 615.444835][T25920] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 615.475768][ T5198] ldm_validate_partition_table(): Disk read failed. [ 615.484615][ T5198] Dev loop5: unable to read RDB block 0 [ 615.491178][ T5198] loop5: unable to read partition table [ 615.497469][ T5198] loop5: partition table beyond EOD, truncated [ 615.953822][ T5953] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 616.122753][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 616.144521][ T5953] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 616.157201][ T5915] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 616.166065][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.183527][ T5953] usb 2-1: config 0 descriptor?? [ 616.201377][ T5953] gspca_main: sq930x-2.14.0 probing 041e:403c [ 616.240483][T25950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.377301][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 616.404365][ T5915] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 616.429096][ T5915] usb 4-1: config 179 has no interface number 0 [ 616.459836][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 616.491149][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 616.503505][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 616.523987][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 616.536429][ T5915] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 616.553689][ T5915] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 616.563858][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.577575][T25944] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 616.815257][ T5915] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input63 [ 617.004089][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 617.004094][ T5816] usb 4-1: USB disconnect, device number 99 [ 617.222221][T25977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9415'. [ 617.294917][ T5953] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 617.352600][ T5953] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 617.373432][ T5953] usb 2-1: USB disconnect, device number 63 [ 617.968277][T25999] wireguard0: entered promiscuous mode [ 617.993315][T25999] wireguard0: entered allmulticast mode [ 618.535603][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9434'. [ 618.557933][T26019] tipc: Resetting bearer [ 618.593783][T26019] netlink: 'syz.0.9434': attribute type 2 has an invalid length. [ 619.015209][T26035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9441'. [ 619.343134][ T5915] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 619.500223][ T5915] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 619.518559][ T5915] usb 4-1: config 0 has no interface number 0 [ 619.533601][ T5915] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 619.551197][ T5915] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 619.571206][ T5915] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 619.584421][ T5915] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 619.599312][ T5915] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 619.611238][ T5915] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 619.651632][ T5915] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 619.672462][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.723471][ T5915] usb 4-1: config 0 descriptor?? [ 619.737221][T26041] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 619.773725][T26041] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 619.806794][ T5915] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 619.901993][T26061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9450'. [ 619.930131][T26061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9450'. [ 620.040082][ T5915] usb 4-1: USB disconnect, device number 100 [ 620.064111][ T5915] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 621.360302][T26124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9480'. [ 622.122466][ T5953] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 622.128255][ T30] audit: type=1326 audit(1764464820.944:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26151 comm="syz.2.9493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb099d8f749 code=0x0 [ 622.274556][ T5953] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 622.283595][ T5953] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.294760][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 622.303829][ T5953] usb 2-1: config 1 has no interface number 0 [ 622.311469][ T5953] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 622.322503][ T5953] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 622.337766][ T5953] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.347015][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.355093][ T5953] usb 2-1: Product: syz [ 622.359260][ T5953] usb 2-1: Manufacturer: syz [ 622.364018][ T5953] usb 2-1: SerialNumber: syz [ 622.786467][ T5816] usb 2-1: USB disconnect, device number 64 [ 622.922601][ T5953] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 623.013185][T26157] bond2: entered allmulticast mode [ 623.018960][T26157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.027110][T26157] bridge0: port 3(bond2) entered blocking state [ 623.034235][T26157] bridge0: port 3(bond2) entered disabled state [ 623.043107][T26157] bond2: entered promiscuous mode [ 623.083744][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 623.099365][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 623.110776][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 623.125973][ T5953] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 623.136011][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.148448][ T5953] usb 4-1: config 0 descriptor?? [ 623.163021][T26155] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 623.599953][ T5953] aureal 0003:0755:2626.0078: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 623.627739][ T5953] aureal 0003:0755:2626.0078: unknown main item tag 0x6 [ 623.637025][ T5953] aureal 0003:0755:2626.0078: report_id 29495 is invalid [ 623.644722][ T5953] aureal 0003:0755:2626.0078: item 0 2 1 8 parsing failed [ 623.653886][ T5953] aureal 0003:0755:2626.0078: probe with driver aureal failed with error -22 [ 623.811303][ T5953] usb 4-1: USB disconnect, device number 101 [ 624.400737][T26211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.864737][ T5885] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 625.035646][ T5885] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 625.055389][ T5885] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 625.079958][ T5885] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 625.108757][ T5885] usb 4-1: New USB device found, idVendor=054c, idProduct=0266, bcdDevice= 0.00 [ 625.133434][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.449342][T26252] ALSA: seq fatal error: cannot create timer (-22) [ 626.077157][ T5885] usb 4-1: USB disconnect, device number 102 [ 626.188660][T26275] netlink: 'syz.2.9548': attribute type 11 has an invalid length. [ 626.207688][T26275] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.9548'. [ 627.352523][ T5953] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 627.505411][ T5953] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.516150][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 627.525672][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 627.537338][ T5953] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 627.548297][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.565442][T26303] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 627.591910][ T5953] hub 2-1:1.0: bad descriptor, ignoring hub [ 627.599007][ T5953] hub 2-1:1.0: probe with driver hub failed with error -5 [ 627.610112][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 627.616232][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 627.639847][ T5953] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 627.646144][ T5953] cdc_wdm 2-1:1.0: Unknown control protocol [ 628.677548][ T30] audit: type=1326 audit(1764464827.494:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26319 comm="syz.3.9566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d618f749 code=0x7ffc0000 [ 628.704812][ T30] audit: type=1326 audit(1764464827.494:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26319 comm="syz.3.9566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d618f749 code=0x7ffc0000 [ 628.729067][ T30] audit: type=1326 audit(1764464827.494:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26319 comm="syz.3.9566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f54d618f749 code=0x7ffc0000 [ 628.753956][ T30] audit: type=1326 audit(1764464827.524:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26319 comm="syz.3.9566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d618f749 code=0x7ffc0000 [ 628.777557][ T30] audit: type=1326 audit(1764464827.524:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26319 comm="syz.3.9566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d618f749 code=0x7ffc0000 [ 629.708532][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.715138][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.820162][T26335] could not allocate digest TFM handle cryptd(blake2b-160) [ 630.104740][ T5915] hid-generic 00A0:0006:0003.0079: unknown main item tag 0x0 [ 630.126854][ T5915] hid-generic 00A0:0006:0003.0079: unknown main item tag 0x0 [ 630.135853][ T5915] hid-generic 00A0:0006:0003.0079: unknown main item tag 0x0 [ 630.144851][ T5915] hid-generic 00A0:0006:0003.0079: unknown main item tag 0x0 [ 630.154450][ T5915] hid-generic 00A0:0006:0003.0079: unknown main item tag 0x0 [ 630.163737][ T5915] hid-generic 00A0:0006:0003.0079: unknown main item tag 0x0 [ 630.171577][ T5915] hid-generic 00A0:0006:0003.0079: unknown main item tag 0x0 [ 630.180951][ T5915] hid-generic 00A0:0006:0003.0079: unknown main item tag 0x0 [ 630.189697][ T5915] hid-generic 00A0:0006:0003.0079: unknown main item tag 0x0 [ 630.198040][ T5915] hid-generic 00A0:0006:0003.0079: unknown main item tag 0x0 [ 630.209958][ T5915] hid-generic 00A0:0006:0003.0079: hidraw0: HID v0.05 Device [syz0] on syz0 [ 630.339589][T26365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9583'. [ 630.455781][T26369] kvm: kvm [26368]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ff [ 630.906900][T26376] loop6: detected capacity change from 0 to 515899392 [ 631.192085][ T5953] usb 2-1: USB disconnect, device number 65 [ 631.213366][T26303] cdc_wdm 2-1:1.0: Error autopm - -16 [ 631.245595][ T30] audit: type=1326 audit(1764464830.054:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.2.9593" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb099d8f749 code=0x0 [ 632.310973][T26432] kvm_intel: kvm [26431]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 632.537691][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9618'. [ 632.933566][ T5915] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 633.106794][ T5915] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 633.136979][ T5915] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 633.160694][ T5915] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 633.175479][ T5915] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 633.193200][ T5915] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 633.213848][ T5915] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 633.239301][ T5915] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 633.280826][ T5915] usb 4-1: config 168 interface 0 has no altsetting 0 [ 633.293007][ T5915] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 633.300493][ T5915] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 633.322662][ T5915] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 633.334922][ T5915] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 633.348565][ T5915] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 633.361494][ T5915] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 633.375316][ T5915] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 633.392055][ T5915] usb 4-1: config 168 interface 0 has no altsetting 0 [ 633.409897][ T5915] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 633.419055][ T5915] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 633.420061][T26472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9629'. [ 633.431051][ T5915] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 633.454063][ T5915] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 633.458199][T26472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9629'. [ 633.471295][ T5915] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 633.490335][ T5915] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 633.502715][ T5915] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 633.519664][ T5915] usb 4-1: config 168 interface 0 has no altsetting 0 [ 633.532128][ T5915] usb 4-1: string descriptor 0 read error: -22 [ 633.539365][ T5915] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 633.551886][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.581731][ T5915] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 634.012921][T26489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9635'. [ 634.021906][T26489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9635'. [ 634.330748][T26495] erspan0: entered promiscuous mode [ 634.712969][ T5953] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 634.867189][ T5953] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 634.876845][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.893098][ T5953] usb 2-1: config 0 descriptor?? [ 634.905252][ T5953] cp210x 2-1:0.0: cp210x converter detected [ 635.353189][ T5953] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 635.574359][ T5953] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 635.582104][ T5953] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 635.598200][ T5953] usb 2-1: cp210x converter now attached to ttyUSB0 [ 635.616992][ T5953] usb 2-1: USB disconnect, device number 66 [ 635.634050][ T5953] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 635.644551][ T5953] cp210x 2-1:0.0: device disconnected [ 635.857603][T26527] ptrace attach of "./syz-executor exec"[5839] was attempted by "\x09  "[26527] [ 636.041842][ T5915] usb 4-1: USB disconnect, device number 103 [ 637.063499][ T5915] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 637.238697][ T5915] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 637.250666][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.265721][ T5915] usb 4-1: Product: syz [ 637.280294][ T5915] usb 4-1: Manufacturer: syz [ 637.286308][ T5915] usb 4-1: SerialNumber: syz [ 637.301868][ T5915] usb 4-1: config 0 descriptor?? [ 637.363801][T26566] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9667'. [ 637.532563][ T5953] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 637.683835][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 637.693829][ T5953] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 637.705384][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 637.712048][ T5953] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 637.721747][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.730490][ T5915] airspy 4-1:0.0: Board ID: 00 [ 637.736264][ T5953] usb 2-1: config 0 descriptor?? [ 637.741725][ T5915] airspy 4-1:0.0: Firmware version: [ 638.139391][ T5915] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 638.165578][ T5915] airspy 4-1:0.0: Registered as swradio24 [ 638.181626][ T5915] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 638.205633][ T5915] usb 4-1: USB disconnect, device number 104 [ 638.594516][ T5953] hid_parser_main: 5 callbacks suppressed [ 638.594544][ T5953] corsair-cpro 0003:1B1C:0C10.007A: unknown main item tag 0x0 [ 638.612706][ T5953] corsair-cpro 0003:1B1C:0C10.007A: unknown main item tag 0x0 [ 638.620324][ T5953] corsair-cpro 0003:1B1C:0C10.007A: unknown main item tag 0x0 [ 638.628471][ T5953] corsair-cpro 0003:1B1C:0C10.007A: unknown main item tag 0x0 [ 638.636680][ T5953] corsair-cpro 0003:1B1C:0C10.007A: unknown main item tag 0x0 [ 638.649972][ T5953] corsair-cpro 0003:1B1C:0C10.007A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 638.797935][T26593] loop2: detected capacity change from 0 to 7 [ 638.828114][ T5964] Dev loop2: unable to read RDB block 7 [ 638.836683][ T5964] loop2: AHDI p1 [ 638.840551][ T5964] loop2: partition table partially beyond EOD, truncated [ 638.857180][T26593] Dev loop2: unable to read RDB block 7 [ 638.864483][T26593] loop2: AHDI p1 [ 638.868370][T26593] loop2: partition table partially beyond EOD, truncated [ 639.044973][ T5953] corsair-cpro 0003:1B1C:0C10.007A: probe with driver corsair-cpro failed with error -110 [ 639.067939][ T5953] usb 2-1: USB disconnect, device number 67 [ 639.303083][ T5816] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 639.472513][ T5816] usb 4-1: Using ep0 maxpacket: 32 [ 639.484121][ T5816] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 639.492820][ T5816] usb 4-1: config 0 has no interface number 0 [ 639.501570][ T5816] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 639.511235][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.519647][ T5816] usb 4-1: Product: syz [ 639.528041][ T5816] usb 4-1: Manufacturer: syz [ 639.533202][ T5816] usb 4-1: SerialNumber: syz [ 639.542073][ T5816] usb 4-1: config 0 descriptor?? [ 639.557318][ T5816] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 639.662592][ T5953] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 639.784719][ T5816] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 639.800885][ T5816] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 639.837282][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 639.911659][ T5953] usb 2-1: unable to get BOS descriptor or descriptor too short [ 639.930694][ T5953] usb 2-1: no configurations [ 639.936597][ T5953] usb 2-1: can't read configurations, error -22 [ 639.987675][T26599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.014131][T26599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.230911][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 640.239709][ T5816] usb 4-1: USB disconnect, device number 105 [ 640.262883][ T5816] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 640.298350][ T5816] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 640.321926][ T5816] quatech2 4-1:0.51: device disconnected [ 640.892753][T26637] input: syz0 as /devices/virtual/input/input64 [ 643.088001][T26697] tipc: Enabled bearer , priority 4 [ 644.681407][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9751'. [ 645.588448][T26790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9765'. [ 645.667281][T26795] Dead loop on virtual device ip6_vti0, fix it urgently! [ 646.361654][T26823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9780'. [ 646.508244][T26825] netlink: 'syz.2.9782': attribute type 3 has an invalid length. [ 646.545214][T26825] netlink: 812 bytes leftover after parsing attributes in process `syz.2.9782'. [ 647.001339][T26841] lo: entered promiscuous mode [ 647.006826][T26841] lo: entered allmulticast mode [ 647.012900][T26841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.533095][ T5915] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 647.660566][T26870] vlan5: entered allmulticast mode [ 647.683453][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 647.694693][ T5915] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 647.705012][ T5915] usb 2-1: config 0 has no interface number 0 [ 647.726588][ T5915] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 647.737852][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.747145][ T5915] usb 2-1: Product: syz [ 647.751512][ T5915] usb 2-1: Manufacturer: syz [ 647.758123][ T5915] usb 2-1: SerialNumber: syz [ 647.774376][ T5915] usb 2-1: config 0 descriptor?? [ 647.786754][ T5915] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 647.803110][ T5915] usb 2-1: selecting invalid altsetting 1 [ 647.808997][ T5915] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 647.836870][ T5915] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 647.853834][ T5915] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 647.864531][ T5915] usb 2-1: media controller created [ 647.906637][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 648.066053][ T5915] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 648.074023][ T5915] zl10353_read_register: readreg error (reg=127, ret==-32) [ 648.372675][ T5953] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 648.532466][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 648.539886][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.551013][ T5953] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 648.560224][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.571108][ T5953] usb 4-1: config 0 descriptor?? [ 648.786407][ T5953] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 649.143876][T26853] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 649.154420][ T5915] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 649.215176][ T5915] usb 2-1: USB disconnect, device number 70 [ 649.217470][ T5953] usb 4-1: USB disconnect, device number 106 [ 649.876954][T26903] usb usb8: usbfs: process 26903 (syz.3.9816) did not claim interface 0 before use [ 649.998652][T26907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9818'. [ 650.021995][T26907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9818'. [ 651.101185][T26937] veth1_to_bond: entered allmulticast mode [ 651.124063][T26937] veth1_to_bond: left allmulticast mode [ 651.254397][T26944] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9834'. [ 651.435273][T26956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 651.562492][ T5953] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 651.734572][ T5953] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.755157][ T5953] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.773599][T26968] macvlan0: entered promiscuous mode [ 651.777639][ T5953] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.789124][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.797914][ T5953] usb 4-1: Product: syz [ 651.801302][T26968] netlink: 'syz.0.9846': attribute type 1 has an invalid length. [ 651.802274][ T5953] usb 4-1: Manufacturer: syz [ 651.815189][ T5953] usb 4-1: SerialNumber: syz [ 651.838566][T26968] netlink: 'syz.0.9846': attribute type 2 has an invalid length. [ 651.847337][T26968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9846'. [ 652.046560][ T5953] usb 4-1: 0:2 : does not exist [ 652.068319][ T5953] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 652.126573][ T5953] usb 4-1: USB disconnect, device number 107 [ 652.168698][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.313757][T26993] input: syz0 as /devices/virtual/input/input65 [ 652.661590][T27007] dummy0: left allmulticast mode [ 652.667575][T27007] dummy0: left promiscuous mode [ 652.674979][T27007] bridge0: port 4(dummy0) entered disabled state [ 652.688654][T27007] bridge_slave_0: left allmulticast mode [ 652.695547][T27007] bridge_slave_0: left promiscuous mode [ 652.701954][T27007] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.716873][T27010] netlink: 'syz.0.9864': attribute type 10 has an invalid length. [ 652.731768][T27007] bridge_slave_1: left allmulticast mode [ 652.738153][T27010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9864'. [ 652.738208][T27007] bridge_slave_1: left promiscuous mode [ 652.756171][T27007] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.770696][T27007] bond0: (slave bond_slave_0): Releasing backup interface [ 652.786637][T27007] bond0: (slave bond_slave_1): Releasing backup interface [ 652.805547][T27007] team0: Port device team_slave_0 removed [ 652.817705][T27007] team0: Port device team_slave_1 removed [ 652.831489][T27007] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 652.849143][T27010] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 653.143984][ T5816] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 653.304632][ T5816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.315212][ T5816] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 653.333522][ T5816] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.342902][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.350949][ T5816] usb 4-1: Product: syz [ 653.356220][ T5816] usb 4-1: Manufacturer: syz [ 653.361484][ T5816] usb 4-1: SerialNumber: syz [ 653.589948][T27014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.601457][T27014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.619509][ T5816] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 653.639619][ T5816] usb 4-1: USB disconnect, device number 108 [ 653.798971][T27046] cgroup: fork rejected by pids controller in /syz1 [ 654.082659][ T5816] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 654.180295][ T1091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.243108][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 654.262142][ T5816] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 654.276886][ T1091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.287510][ T5816] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 654.309683][ T5816] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.320426][ T5816] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 654.330729][ T5816] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 654.341283][ T5816] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.383132][ T5816] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.398872][ T5816] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 654.417045][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.477572][ T1091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.549023][ T1091] tipc: Resetting bearer [ 654.597206][ T1091] tipc: Disabling bearer [ 654.613951][ T1091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.677229][ T5816] usb 4-1: usb_control_msg returned -71 [ 654.683012][ T5816] usbtmc 4-1:16.0: can't read capabilities [ 654.696967][ T5816] usbtmc 4-1:16.0: Failed to submit iin_urb [ 654.704234][ T5816] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 654.718439][ T5816] usb 4-1: USB disconnect, device number 109 [ 654.840067][ T1091] bridge_slave_1: left allmulticast mode [ 654.847574][ T1091] bridge_slave_1: left promiscuous mode [ 654.855579][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.869216][ T1091] bridge_slave_0: left allmulticast mode [ 654.875136][ T1091] bridge_slave_0: left promiscuous mode [ 654.883634][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.895665][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 654.908705][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 654.918401][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 654.926949][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 654.935822][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 654.969717][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 654.981423][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 654.993680][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 655.014778][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 655.028288][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 655.968812][ T1091] bond0 (unregistering): (slave 70): Releasing backup interface [ 655.980180][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.991360][ T1091] bond0 (unregistering): Released all slaves [ 656.007651][ T1091] bond1 (unregistering): Released all slaves [ 656.118592][ T1091] bond2 (unregistering): Released all slaves [ 656.223952][ T1091] team0: Port device bond3 removed [ 656.230790][ T1091] bond3 (unregistering): Released all slaves [ 656.477782][ T1091] tipc: Disabling bearer [ 656.484033][T27082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9898'. [ 656.533590][ T1091] tipc: Left network mode [ 656.550460][T27082] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9898'. [ 656.566375][T27082] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 657.063458][ T5829] Bluetooth: hci3: command tx timeout [ 657.127242][T27056] chnl_net:caif_netlink_parms(): no params data found [ 657.473974][T27116] openvswitch: netlink: nsh attr 1025 is out of range max 3 [ 657.483883][T27116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.556237][T27056] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.572701][T27056] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.589078][T27056] bridge_slave_0: entered allmulticast mode [ 657.609207][T27056] bridge_slave_0: entered promiscuous mode [ 657.659992][T27056] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.675640][T27056] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.684697][T27056] bridge_slave_1: entered allmulticast mode [ 657.720547][T27056] bridge_slave_1: entered promiscuous mode [ 657.974325][T27056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.996539][T27056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.021848][T27130] ALSA: mixer_oss: invalid OSS volume '' [ 658.051017][ T1091] hsr_slave_0: left promiscuous mode [ 658.060181][ T1091] hsr_slave_1: left promiscuous mode [ 658.080321][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.092466][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.117061][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.131520][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.174645][ T1091] veth1_macvtap: left promiscuous mode [ 658.180566][ T1091] veth0_macvtap: left promiscuous mode [ 658.197388][ T1091] veth1_vlan: left promiscuous mode [ 659.071181][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 659.128380][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 659.149625][ T5829] Bluetooth: hci3: command tx timeout [ 659.671021][T27056] team0: Port device team_slave_0 added [ 659.738435][T27056] team0: Port device team_slave_1 added [ 659.800340][T27160] tipc: Enabling of bearer rejected, already enabled [ 659.926882][T27056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.981186][T27056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.081773][T27056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.098183][T27056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.106486][T27056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.134045][T27056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.260904][T27056] hsr_slave_0: entered promiscuous mode [ 660.284953][T27056] hsr_slave_1: entered promiscuous mode [ 660.298541][T27056] debugfs: 'hsr0' already exists in 'hsr' [ 660.313881][T27056] Cannot create hsr debugfs directory [ 660.390819][ T1091] IPVS: stop unused estimator thread 0... [ 661.224680][ T5829] Bluetooth: hci3: command tx timeout [ 661.574874][T27056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 661.610385][T27056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 661.657140][T27056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 661.694956][T27056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 662.060496][T27243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9946'. [ 662.093203][T27056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.139007][T27056] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.193635][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.200838][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.256724][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.263987][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.536046][T27056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.708758][T27056] veth0_vlan: entered promiscuous mode [ 662.759460][T27056] veth1_vlan: entered promiscuous mode [ 662.878129][T27056] veth0_macvtap: entered promiscuous mode [ 662.925381][T27056] veth1_macvtap: entered promiscuous mode [ 663.018159][T27056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.066162][T27056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.118912][ T1091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.159754][ T1091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.220969][ T1091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.244465][ T1091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.302494][ T5829] Bluetooth: hci3: command tx timeout [ 663.524808][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.559954][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.655563][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.677468][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.476113][T27320] sctp: [Deprecated]: syz.3.9971 (pid 27320) Use of int in maxseg socket option. [ 664.476113][T27320] Use struct sctp_assoc_value instead [ 665.023254][ T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 665.196972][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 665.206569][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.224546][ T9] usb 4-1: config 0 descriptor?? [ 665.238524][ T9] cp210x 4-1:0.0: cp210x converter detected [ 665.668224][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 665.688276][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 665.895914][ T9] usb 4-1: USB disconnect, device number 110 [ 665.913794][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 665.945817][ T9] cp210x 4-1:0.0: device disconnected [ 668.288210][T27447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10012'. [ 668.303471][T27447] netlink: 'syz.3.10012': attribute type 30 has an invalid length. [ 668.507319][T27451] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x4) [ 668.878087][T27466] netlink: 464 bytes leftover after parsing attributes in process `syz.4.10021'. [ 669.193860][ T5885] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 669.355200][ T5885] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 669.366164][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.386207][ T5885] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 669.401409][ T5885] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 669.410615][ T5885] usb 4-1: Manufacturer: syz [ 669.419820][ T5885] usb 4-1: config 0 descriptor?? [ 669.555287][ T5885] rc_core: IR keymap rc-hauppauge not found [ 669.565933][ T5885] Registered IR keymap rc-empty [ 669.572094][ T5885] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 669.615465][ T5885] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input66 [ 670.397165][ T5816] usb 4-1: USB disconnect, device number 111 [ 671.111340][T27518] veth7: entered promiscuous mode [ 671.534035][ T30] audit: type=1326 audit(1764464870.354:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27457 comm="syz.1.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5806d8f749 code=0x7ffc0000 [ 671.562000][ T30] audit: type=1326 audit(1764464870.354:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27457 comm="syz.1.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5806d2b829 code=0x7ffc0000 [ 671.584532][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.593671][ T30] audit: type=1326 audit(1764464870.354:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27457 comm="syz.1.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5806d2b829 code=0x7ffc0000 [ 671.660495][ T30] audit: type=1326 audit(1764464870.354:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27457 comm="syz.1.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5806d2b829 code=0x7ffc0000 [ 671.685628][ T30] audit: type=1326 audit(1764464870.354:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27457 comm="syz.1.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5806d2b829 code=0x7ffc0000 [ 671.711036][ T30] audit: type=1326 audit(1764464870.354:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27457 comm="syz.1.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5806d2b829 code=0x7ffc0000 [ 671.733554][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.744334][ T30] audit: type=1326 audit(1764464870.354:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27457 comm="syz.1.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5806d2b829 code=0x7ffc0000 [ 671.766810][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.775105][ T30] audit: type=1326 audit(1764464870.354:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27457 comm="syz.1.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5806d2b829 code=0x7ffc0000 [ 671.799394][ T30] audit: type=1326 audit(1764464870.354:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27457 comm="syz.1.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5806d2b829 code=0x7ffc0000 [ 671.821848][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.829388][ T30] audit: type=1326 audit(1764464870.354:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27457 comm="syz.1.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5806d2b829 code=0x7ffc0000 [ 672.408683][T27563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 672.475350][T27563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 672.736808][T27572] macvlan2: entered promiscuous mode [ 672.742530][T27572] macvlan2: entered allmulticast mode [ 672.879432][T27579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10070'. [ 673.012515][ T5816] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 673.164780][ T5816] usb 4-1: config 0 has no interfaces? [ 673.179390][ T5816] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 673.189000][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.198379][ T5816] usb 4-1: Product: syz [ 673.202854][ T5816] usb 4-1: Manufacturer: syz [ 673.207941][ T5816] usb 4-1: SerialNumber: syz [ 673.215732][ T5816] usb 4-1: config 0 descriptor?? [ 673.476498][ T5885] usb 4-1: USB disconnect, device number 112 [ 673.790063][T27616] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10087'. [ 674.509838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 674.543339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 677.371495][T27747] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10144'. [ 677.501702][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 677.501724][ T30] audit: type=1800 audit(1764464876.314:6142): pid=27750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10145" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 678.143065][ T5885] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 678.302759][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 678.310689][ T5885] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 678.320552][ T5885] usb 2-1: config 0 has no interface number 0 [ 678.327772][ T5885] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 678.343139][ T5885] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 678.356558][ T5885] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 678.369302][ T5885] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.386574][ T5885] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 678.398490][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.407701][ T5885] usb 2-1: Product: syz [ 678.412242][ T5885] usb 2-1: Manufacturer: syz [ 678.418092][ T5885] usb 2-1: SerialNumber: syz [ 678.431785][ T5885] usb 2-1: config 0 descriptor?? [ 678.657579][ T5885] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 678.871246][ T5885] usb 2-1: USB disconnect, device number 71 [ 679.317629][T27799] loop4: detected capacity change from 0 to 1 [ 679.327449][ T5966] Dev loop4: unable to read RDB block 1 [ 679.335199][ T5966] loop4: unable to read partition table [ 679.341305][ T5966] loop4: partition table beyond EOD, truncated [ 679.355001][T27799] Dev loop4: unable to read RDB block 1 [ 679.360799][T27799] loop4: unable to read partition table [ 679.368658][T27799] loop4: partition table beyond EOD, truncated [ 679.376136][T27799] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 680.015377][T27829] @: renamed from vlan0 (while UP) [ 680.576440][T27858] ptrace attach of "./syz-executor exec"[5838] was attempted by "\x09   [ 680.831898][T27870] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10203'. [ 680.923380][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.267438][T27886] netlink: 'syz.1.10211': attribute type 1 has an invalid length. [ 681.275647][T27886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.884431][T27907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.562980][T27929] loop6: detected capacity change from 0 to 524287999 [ 682.611515][T27931] dvmrp8: entered allmulticast mode [ 682.629134][T27931] dvmrp8: left allmulticast mode [ 683.352492][ T5816] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 683.432580][ T5885] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 683.514402][ T5816] usb 4-1: config 0 has no interfaces? [ 683.520048][ T5816] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 683.529737][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.540202][ T5816] usb 4-1: config 0 descriptor?? [ 683.583323][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 683.590349][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.602192][ T5885] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 683.612123][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.623854][ T5885] usb 2-1: config 0 descriptor?? [ 683.767149][T27953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.779060][T27953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.797400][ T9] usb 4-1: USB disconnect, device number 113 [ 684.047917][ T5885] aquacomputer_d5next 0003:0C70:F003.007B: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.1-1/input0 [ 684.255454][ T9] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 684.271313][ T5885] usb 2-1: USB disconnect, device number 72 [ 684.413188][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 684.420353][ T9] usb 4-1: config index 0 descriptor too short (expected 72, got 36) [ 684.431203][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 684.448729][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 684.458929][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.467902][ T9] usb 4-1: Product: syz [ 684.473612][ T9] usb 4-1: Manufacturer: syz [ 684.478558][ T9] usb 4-1: SerialNumber: syz [ 684.760405][ T9] usb 4-1: USB disconnect, device number 114 [ 685.959263][T28010] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10265'. [ 686.135541][T28018] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 686.902627][ T5953] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 687.062708][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 687.091594][ T5953] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 687.126493][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.178376][ T5953] usb 2-1: config 0 descriptor?? [ 687.535933][T28062] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10288'. [ 687.546845][T28062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10288'. [ 687.598983][ T5953] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 687.631161][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 687.662955][ T5953] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 687.677213][ T5953] usb 2-1: media controller created [ 687.711229][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 688.207243][T28089] loop6: detected capacity change from 0 to 524288000 [ 688.224281][T28089] buffer_io_error: 40 callbacks suppressed [ 688.224301][T28089] Buffer I/O error on dev loop6, logical block 0, async page read [ 688.249622][T28089] Buffer I/O error on dev loop6, logical block 0, async page read [ 688.296653][T28089] Buffer I/O error on dev loop6, logical block 0, async page read [ 688.309725][T28093] loop6: detected capacity change from 524288000 to 0 [ 688.325124][ T5953] az6027: usb out operation failed. (-71) [ 688.330915][ T5953] stb0899_attach: Driver disabled by Kconfig [ 688.348353][T28089] ldm_validate_partition_table(): Disk read failed. [ 688.362918][ T5953] az6027: no front-end attached [ 688.362918][ T5953] [ 688.370455][T28089] Dev loop6: unable to read RDB block 0 [ 688.384711][ T5953] az6027: usb out operation failed. (-71) [ 688.390516][ T5953] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 688.394884][T28089] loop6: unable to read partition table [ 688.421952][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68 [ 688.429268][T28089] loop6: partition table beyond EOD, truncated [ 688.474250][T28089] loop_reread_partitions: partition scan of loop6 (u0A ) failed (rc=-5) [ 688.490380][ T5953] dvb-usb: schedule remote query interval to 400 msecs. [ 688.532778][ T5953] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 688.575032][ T5953] usb 2-1: USB disconnect, device number 73 [ 688.793813][ T5953] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 689.078433][T28110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10309'. [ 689.645982][T28133] vivid-003: disconnect [ 689.655845][T28132] vivid-003: reconnect [ 689.952653][T28144] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10324'. [ 689.972472][T28144] netlink: 'syz.3.10324': attribute type 4 has an invalid length. [ 690.373666][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10331'. [ 690.465528][T28160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.158451][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.158500][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.822113][T28196] netlink: 300 bytes leftover after parsing attributes in process `syz.3.10348'. [ 691.841545][T28198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10349'. [ 692.167099][T28214] sctp: [Deprecated]: syz.0.10356 (pid 28214) Use of int in maxseg socket option. [ 692.167099][T28214] Use struct sctp_assoc_value instead [ 692.602213][T28234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.650173][T28237] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10367'. [ 692.677184][T28234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.681421][T28239] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 692.798611][T28241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10369'. [ 693.163058][ T9] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 693.312510][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 693.319533][ T9] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 693.329532][ T9] usb 4-1: config 0 has no interface number 0 [ 693.336861][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 693.348887][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 693.363573][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 693.374885][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.385822][ T9] usb 4-1: Product: syz [ 693.390035][ T9] usb 4-1: Manufacturer: syz [ 693.395962][ T9] usb 4-1: SerialNumber: syz [ 693.404574][ T9] usb 4-1: config 0 descriptor?? [ 693.414189][T28250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 693.421760][T28250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 693.647040][T28250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 693.661290][T28250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 693.679354][T28275] netlink: 'syz.2.10385': attribute type 14 has an invalid length. [ 694.090136][ T9] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.103788][ T9] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 694.118149][ T9] asix 4-1:0.251: probe with driver asix failed with error -71 [ 694.135439][ T9] usb 4-1: USB disconnect, device number 115 [ 694.759586][T28314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10404'. [ 694.905288][ T5953] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 694.953165][ T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 695.074439][ T5953] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 695.092400][ T5953] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 695.102930][ T5953] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 695.112046][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.127491][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 695.138802][T28308] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 695.146878][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.156876][ T9] usb 4-1: Product: syz [ 695.161087][ T9] usb 4-1: Manufacturer: syz [ 695.166632][ T9] usb 4-1: SerialNumber: syz [ 695.179564][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 695.212059][ T5953] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 695.233979][ T5885] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 695.429560][ T5953] usb 2-1: USB disconnect, device number 74 [ 695.857840][ T5953] usb 4-1: USB disconnect, device number 116 [ 696.503901][ T5885] usb 4-1: Service connection timeout for: 256 [ 696.513106][ T5885] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 696.529045][ T5885] ath9k_htc: Failed to initialize the device [ 696.538405][ T5953] usb 4-1: ath9k_htc: USB layer deinitialized [ 698.262790][ T5953] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 698.428105][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.438694][ T5953] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 698.447915][ T5953] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 698.457065][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.468930][ T5953] usb 4-1: config 0 descriptor?? [ 698.745212][ T5953] usb 4-1: USB disconnect, device number 117 [ 698.974178][T28407] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10444'. [ 699.365725][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 699.522994][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 699.531681][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 699.541589][ T5885] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 699.551187][ T9] usb 2-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 699.564069][ T9] usb 2-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 699.575492][ T9] usb 2-1: config 12 interface 0 has no altsetting 0 [ 699.586445][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 699.597354][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.606559][ T9] usb 2-1: Product: syz [ 699.611016][ T9] usb 2-1: Manufacturer: syz [ 699.617197][ T9] usb 2-1: SerialNumber: syz [ 699.713890][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 699.725466][ T5885] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 699.734840][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.746671][ T5885] usb 4-1: config 0 has no interfaces? [ 699.758021][ T5885] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 699.768578][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.773534][T28429] vivid-001: disconnect [ 699.778506][ T5885] usb 4-1: Product: syz [ 699.783552][T28428] vivid-001: reconnect [ 699.785884][ T5885] usb 4-1: Manufacturer: syz [ 699.794333][ T5885] usb 4-1: SerialNumber: syz [ 699.810340][ T5885] usb 4-1: config 0 descriptor?? [ 699.847530][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 699.856731][ T9] usb 2-1: selecting invalid altsetting 0 [ 699.917794][ T9] snd-usb-audio 2-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 699.961606][ T9] usb 2-1: USB disconnect, device number 75 [ 700.006969][ T7958] udevd[7958]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.587833][ T5915] usb 4-1: USB disconnect, device number 118 [ 701.087242][T28462] netlink: 'syz.2.10469': attribute type 9 has an invalid length. [ 701.097702][T28462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10469'. [ 703.584997][T28544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10506'. [ 703.598873][T28544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10506'. [ 703.620417][T28544] vlan3: entered allmulticast mode [ 703.626046][T28544] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 703.632457][ T5816] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 703.792575][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 703.808516][ T5816] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 703.817960][ T5816] usb 4-1: config 0 has no interface number 0 [ 703.825526][ T5816] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.837799][ T5953] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 703.852963][ T5816] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.876856][ T5816] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 703.886444][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.903570][ T5816] usb 4-1: config 0 descriptor?? [ 703.927955][T28556] netlink: 488 bytes leftover after parsing attributes in process `syz.2.10512'. [ 703.938091][T28556] netlink: 488 bytes leftover after parsing attributes in process `syz.2.10512'. [ 704.024695][ T5953] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 704.034237][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.046418][ T5953] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 704.071301][ T5953] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 704.080519][ T5953] usb 2-1: Manufacturer: syz [ 704.096800][ T5953] usb 2-1: config 0 descriptor?? [ 704.212777][ T5953] rc_core: IR keymap rc-hauppauge not found [ 704.220473][ T5953] Registered IR keymap rc-empty [ 704.233095][ T5953] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 704.248207][ T5953] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input76 [ 704.386856][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 704.395226][ T9] usb 2-1: USB disconnect, device number 76 [ 704.527257][ T5816] uclogic 0003:28BD:0071.007C: pen parameters not found [ 704.534949][ T5816] uclogic 0003:28BD:0071.007C: interface is invalid, ignoring [ 704.745748][ T9] usb 4-1: USB disconnect, device number 119 [ 705.313080][T28599] input: syz1 as /devices/virtual/input/input77 [ 705.999678][T28628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10545'. [ 706.351830][ T5885] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 706.523411][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 706.530546][ T5885] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 706.545478][ T5885] usb 4-1: config 0 has no interface number 0 [ 706.565499][ T5885] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 706.575338][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.593025][ T5885] usb 4-1: Product: syz [ 706.597426][ T5885] usb 4-1: Manufacturer: syz [ 706.602045][ T5885] usb 4-1: SerialNumber: syz [ 706.654264][ T5885] usb 4-1: config 0 descriptor?? [ 706.675700][ T5885] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 706.693165][ T5885] usb 4-1: selecting invalid altsetting 1 [ 706.699176][ T5885] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 706.725891][ T5885] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 706.766725][ T5885] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 706.796326][ T5885] usb 4-1: media controller created [ 706.873721][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 707.123452][ T5885] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 707.130521][ T5885] zl10353_read_register: readreg error (reg=127, ret==-71) [ 707.139027][ T5885] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 707.238755][ T5885] usb 4-1: USB disconnect, device number 120 [ 707.939161][T28683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10568'. [ 707.949123][T28683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10568'. [ 707.959256][T28683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10568'. [ 708.097986][T28683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10568'. [ 708.109562][T28683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10568'. [ 708.120977][T28683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10568'. [ 708.246871][T28683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10568'. [ 708.265771][T28683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10568'. [ 708.280021][T28683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10568'. [ 709.505529][T28741] fuse: Invalid gid '00000000000000000003' [ 709.607423][T28745] af_packet: tpacket_rcv: packet too big, clamped from 125 to 4294967286. macoff=82 [ 710.124186][T28762] binder: 28761:28762 ioctl c00c620f 0 returned -14 [ 710.518310][T28777] No such timeout policy "syz0" [ 710.940057][T28794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.433064][T28837] netlink: 'syz.3.10636': attribute type 3 has an invalid length. [ 713.438095][T28875] program syz.2.10653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 714.128199][T28895] erspan0: entered promiscuous mode [ 714.583299][ T5915] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 714.773999][ T5915] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 714.784482][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.804072][ T5915] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.815875][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 714.843308][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.852260][ T5915] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.868511][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 714.881291][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.921853][ T5915] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.936035][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 714.946877][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.956925][T28925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10675'. [ 714.961290][ T5915] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 715.000248][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 715.023957][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 715.043078][ T5915] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 715.058565][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 715.076111][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 715.087620][ T5915] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 715.103866][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 715.123664][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 715.143712][ T5915] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 715.156254][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 715.177209][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 715.197349][ T5915] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 715.236817][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 715.289682][ T5915] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 715.307919][ T5915] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 715.318112][ T5915] usb 2-1: Product: syz [ 715.323545][ T5915] usb 2-1: Manufacturer: syz [ 715.328744][ T5915] usb 2-1: SerialNumber: syz [ 715.357370][ T5915] usb 2-1: config 0 descriptor?? [ 715.377741][ T5915] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 715.512049][T28942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10683'. [ 715.535410][T28944] lo: entered promiscuous mode [ 715.540404][T28944] lo: entered allmulticast mode [ 715.618865][ T5816] usb 2-1: USB disconnect, device number 77 [ 715.629333][ T5816] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 717.598692][ T30] audit: type=1326 audit(1764464916.404:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28990 comm="syz.1.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5806d8f749 code=0x7ffc0000 [ 717.651075][ T30] audit: type=1326 audit(1764464916.404:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28990 comm="syz.1.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5806d8f749 code=0x7ffc0000 [ 717.723905][ T30] audit: type=1326 audit(1764464916.544:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28990 comm="syz.1.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f5806d8f749 code=0x7ffc0000 [ 717.762590][ T5816] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 717.863829][ T30] audit: type=1326 audit(1764464916.544:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28990 comm="syz.1.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5806d8f749 code=0x7ffc0000 [ 717.915624][ T5816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.928119][ T5816] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.960362][ T30] audit: type=1326 audit(1764464916.544:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28990 comm="syz.1.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5806d8f749 code=0x7ffc0000 [ 717.975062][ T5816] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 718.005448][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 718.006934][ T30] audit: type=1326 audit(1764464916.714:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28990 comm="syz.1.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5806d8f749 code=0x7ffc0000 [ 718.045642][ T5816] usb 4-1: SerialNumber: syz [ 718.097466][ T30] audit: type=1326 audit(1764464916.714:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28990 comm="syz.1.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5806d8f749 code=0x7ffc0000 [ 718.167597][ T30] audit: type=1326 audit(1764464916.724:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28990 comm="syz.1.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f5806d8f749 code=0x7ffc0000 [ 718.190239][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.217274][ T30] audit: type=1326 audit(1764464916.724:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28990 comm="syz.1.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5806d8f749 code=0x7ffc0000 [ 718.240842][ T30] audit: type=1326 audit(1764464916.724:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28990 comm="syz.1.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5806d8f749 code=0x7ffc0000 [ 718.279060][ T5816] usb 4-1: 0:2 : does not exist [ 718.306861][ T5816] usb 4-1: USB disconnect, device number 121 [ 718.381109][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.270490][T29033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10725'. [ 720.973195][T29087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.632523][T18339] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 722.794317][T18339] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 722.806073][T18339] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 722.817282][T18339] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 722.827162][T18339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 722.838747][T18339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 722.853488][T18339] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 722.867319][T18339] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 722.876951][T18339] usb 2-1: Product: syz [ 722.881245][T18339] usb 2-1: Manufacturer: syz [ 722.897750][T18339] cdc_wdm 2-1:1.0: skipping garbage [ 722.904717][T18339] cdc_wdm 2-1:1.0: skipping garbage [ 722.912896][T18339] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 722.920807][T18339] cdc_wdm 2-1:1.0: Unknown control protocol [ 723.126024][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 723.132720][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 723.140308][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 723.146979][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 723.155239][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 723.161909][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 723.169450][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 723.172738][T18339] usb 2-1: USB disconnect, device number 78 [ 723.176356][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 723.176378][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 723.278574][T29144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10774'. [ 723.893021][ T5885] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 724.042894][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 724.050218][ T5885] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 724.060454][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.073097][ T5885] usb 4-1: config 0 descriptor?? [ 724.297357][ T5885] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 724.316514][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 724.331645][ T5885] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 724.342030][ T5885] usb 4-1: media controller created [ 724.381941][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 724.458556][ T5885] DVB: Unable to find symbol dib7000p_attach() [ 724.465946][ T5885] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 724.495552][T29158] dib0700: tx buffer length is larger than 4. Not supported. [ 724.604945][ T5885] rc_core: IR keymap rc-dib0700-rc5 not found [ 724.611093][ T5885] Registered IR keymap rc-empty [ 724.625744][ T5885] dvb-usb: could not initialize remote control. [ 724.632198][ T5885] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 724.674014][ T5885] usb 4-1: USB disconnect, device number 122 [ 724.794387][ T5885] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 725.602748][T18339] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 725.753818][T29219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 725.761720][T29219] IPv6: NLM_F_CREATE should be set when creating new route [ 725.769064][T29219] IPv6: NLM_F_CREATE should be set when creating new route [ 725.776365][T29219] IPv6: NLM_F_CREATE should be set when creating new route [ 725.807321][T18339] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 725.816596][T18339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.824854][T18339] usb 4-1: Product: syz [ 725.829150][T18339] usb 4-1: Manufacturer: syz [ 725.833834][T18339] usb 4-1: SerialNumber: syz [ 725.842689][T18339] usb 4-1: config 0 descriptor?? [ 726.065761][T18339] usb 4-1: ignoring: probably an ADSL modem [ 726.469431][T18339] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 726.505401][T29240] kvm: kvm [29238]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 726.679971][ T5885] usb 4-1: USB disconnect, device number 123 [ 726.800575][T29252] netlink: 'syz.4.10822': attribute type 1 has an invalid length. [ 727.483117][T29281] bridge_slave_0: left allmulticast mode [ 727.499357][T29281] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.540585][T29281] bridge_slave_1: left allmulticast mode [ 727.560268][T29281] bridge_slave_1: left promiscuous mode [ 727.569199][T29287] netlink: 'syz.2.10836': attribute type 10 has an invalid length. [ 727.569436][T29281] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.607451][T29287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10836'. [ 727.634932][T29281] team0: Port device team_slave_0 removed [ 727.646146][T29281] team0: Port device team_slave_1 removed [ 727.654974][T29281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.673278][T29281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.708928][T29281] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 727.960917][ T30] audit: type=1326 audit(1764464926.764:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29298 comm="syz.4.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997a38f749 code=0x7ffc0000 [ 728.023230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 728.042928][ T30] audit: type=1326 audit(1764464926.764:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29298 comm="syz.4.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997a38f749 code=0x7ffc0000 [ 728.116653][ T30] audit: type=1326 audit(1764464926.784:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29298 comm="syz.4.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f997a38f749 code=0x7ffc0000 [ 728.142411][ T30] audit: type=1326 audit(1764464926.784:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29298 comm="syz.4.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997a38f749 code=0x7ffc0000 [ 728.212606][ T30] audit: type=1326 audit(1764464926.784:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29298 comm="syz.4.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997a38f749 code=0x7ffc0000 [ 728.236362][ T30] audit: type=1326 audit(1764464926.784:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29298 comm="syz.4.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f997a38f749 code=0x7ffc0000 [ 728.258816][ C1] vkms_vblank_simulate: vblank timer overrun [ 728.265662][ T30] audit: type=1326 audit(1764464926.784:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29298 comm="syz.4.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997a38f749 code=0x7ffc0000 [ 728.288698][ T30] audit: type=1326 audit(1764464926.784:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29298 comm="syz.4.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997a38f749 code=0x7ffc0000 [ 728.311241][ C1] vkms_vblank_simulate: vblank timer overrun [ 728.358488][ T30] audit: type=1326 audit(1764464926.784:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29298 comm="syz.4.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f997a38f749 code=0x7ffc0000 [ 728.438016][T29297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.445087][ T30] audit: type=1326 audit(1764464926.794:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29298 comm="syz.4.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997a38f749 code=0x7ffc0000 [ 728.473933][T29297] bond0: (slave bond1): Enslaving as an active interface with an up link [ 729.075660][T29338] sch_fq: defrate 0 ignored. [ 729.795158][T29362] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 730.890287][ T5915] IPVS: starting estimator thread 0... [ 730.942997][T18339] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 730.993512][T29400] IPVS: using max 26 ests per chain, 62400 per kthread [ 731.115916][T18339] usb 4-1: unable to get BOS descriptor or descriptor too short [ 731.143249][T18339] usb 4-1: not running at top speed; connect to a high speed hub [ 731.172833][T18339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.185196][T18339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 731.198443][T18339] usb 4-1: string descriptor 0 read error: -22 [ 731.206224][T18339] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 731.235802][T18339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.275421][T18339] usb 4-1: 0:2 : does not exist [ 731.456298][T29422] netlink: 324 bytes leftover after parsing attributes in process `syz.2.10898'. [ 732.110338][T18339] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 732.136483][T18339] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 732.168741][T18339] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 732.183730][T18339] usb 4-1: USB disconnect, device number 124 [ 732.288977][T29455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10916'. [ 732.299194][T29455] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10916'. [ 732.700077][T29472] loop4: detected capacity change from 0 to 524287936 [ 734.034908][ T5915] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 734.195072][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.206016][ T5915] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 734.223189][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.245135][ T5915] usb 4-1: config 0 descriptor?? [ 734.879155][ T5915] razer 0003:1532:010E.007D: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 735.084280][ T5953] usb 4-1: USB disconnect, device number 125 [ 735.258005][T29567] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.10970'. [ 735.389425][T29574] bond0: option packets_per_slave: invalid value (18446744072268814746) [ 735.399018][T29574] bond0: option packets_per_slave: allowed values 0 - 65535 [ 735.720799][T29588] netlink: 'syz.2.10979': attribute type 11 has an invalid length. [ 735.798605][T29591] sctp: [Deprecated]: syz.2.10980 (pid 29591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 735.798605][T29591] Use struct sctp_sack_info instead [ 735.952534][T18339] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 736.108757][T18339] usb 2-1: config 0 has no interfaces? [ 736.116895][T18339] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 736.126908][T18339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.135343][T18339] usb 2-1: Product: syz [ 736.139642][T18339] usb 2-1: Manufacturer: syz [ 736.144646][T18339] usb 2-1: SerialNumber: syz [ 736.154907][T18339] usb 2-1: config 0 descriptor?? [ 736.759472][T29619] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10992'. [ 736.890394][T18339] usb 2-1: USB disconnect, device number 79 [ 737.202551][ T5953] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 737.364936][ T5953] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 737.374467][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.393105][ T5953] usb 4-1: config 0 descriptor?? [ 737.572202][T29640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11002'. [ 737.615875][ T5953] usbhid 4-1:0.0: can't add hid device: -71 [ 737.622007][ T5953] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 737.634190][ T5953] usb 4-1: USB disconnect, device number 126 [ 737.994075][ T5915] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 738.154006][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 738.173738][ T5915] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 738.181967][ T5915] usb 2-1: config 1 has no interface number 0 [ 738.203402][ T5915] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 738.215248][ T5915] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 738.243615][ T5915] usb 2-1: config 1 interface 105 has no altsetting 0 [ 738.253986][ T5915] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 738.265843][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.275672][ T5915] usb 2-1: Product: syz [ 738.279869][ T5915] usb 2-1: Manufacturer: syz [ 738.285832][ T5915] usb 2-1: SerialNumber: syz [ 738.299303][T29644] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 738.307700][T29644] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 738.811874][T29644] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 738.828469][T29644] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 738.934251][T29682] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 738.998191][T29684] netlink: 277 bytes leftover after parsing attributes in process `syz.3.11022'. [ 739.283628][ T5915] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 739.313660][ T5915] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 739.328153][ T5915] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 739.365520][ T5915] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c2:d7:21:5f:6f:98 [ 739.403147][ T5885] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 739.413763][ T5915] usb 2-1: USB disconnect, device number 80 [ 739.426240][ T5915] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 739.584118][ T5915] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 739.604852][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 739.623559][ T5915] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 739.643096][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.654754][ T5915] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 739.673331][ T5885] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 739.697234][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.750001][ T5885] usb 4-1: config 0 descriptor?? [ 740.184684][ T5885] hid-thrustmaster 0003:044F:B65D.007E: unknown main item tag 0x0 [ 740.218176][ T5885] hid-thrustmaster 0003:044F:B65D.007E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 740.248650][T29720] loop4: detected capacity change from 0 to 1 [ 740.256846][ T5964] Dev loop4: unable to read RDB block 1 [ 740.275057][ T5885] hid-thrustmaster 0003:044F:B65D.007E: Wrong number of endpoints? [ 740.288659][ T5964] loop4: unable to read partition table [ 740.301320][ T5964] loop4: partition table beyond EOD, truncated [ 740.322659][T29720] Dev loop4: unable to read RDB block 1 [ 740.328308][T29720] loop4: unable to read partition table [ 740.336501][T29720] loop4: partition table beyond EOD, truncated [ 740.346894][T29720] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 740.414347][ C0] hid-thrustmaster 0003:044F:B65D.007E: Unknown packet type 0x0, unable to proceed further with wheel init [ 740.640193][ T5888] usb 4-1: USB disconnect, device number 127 [ 741.031680][T29750] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11054'. [ 741.624860][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 741.624889][ T30] audit: type=1326 audit(1764464940.444:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29772 comm="syz.2.11065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb099d8f749 code=0x0 [ 741.678074][T29776] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 742.259669][T29794] netlink: 'syz.0.11075': attribute type 49 has an invalid length. [ 743.936566][T29863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11104'. [ 743.995421][T29868] netlink: 774 bytes leftover after parsing attributes in process `syz.1.11106'. [ 744.040178][T29868] netlink: 'syz.1.11106': attribute type 1 has an invalid length. [ 744.187298][T29879] tipc: New replicast peer: 255.255.255.255 [ 744.194754][T29879] tipc: Enabled bearer , priority 0 [ 744.741534][T29905] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 744.750461][T29905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.013622][T29921] netlink: 'syz.3.11132': attribute type 1 has an invalid length. [ 745.201814][T29932] sctp: [Deprecated]: syz.2.11137 (pid 29932) Use of int in max_burst socket option. [ 745.201814][T29932] Use struct sctp_assoc_value instead [ 745.355757][T29939] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11141'. [ 745.367906][T29939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11141'. [ 745.602439][ T5953] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 745.673770][T29950] syz.0.11146 (29950) used greatest stack depth: 18008 bytes left [ 745.762596][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 745.778553][ T5953] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 745.791966][ T5953] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 745.803446][ T5953] usb 4-1: config 0 has no interface number 0 [ 745.809739][ T5953] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 745.821650][ T5953] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 745.834152][ T5953] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 745.848010][ T5953] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 745.859544][ T5953] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 745.867959][ T5953] usb 4-1: Product: syz [ 745.872181][ T5953] usb 4-1: Manufacturer: syz [ 745.880133][ T5953] usb 4-1: config 0 descriptor?? [ 745.886425][T29942] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 746.525209][ T5953] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input81 [ 746.754759][ T5888] usb 4-1: USB disconnect, device number 2 [ 746.754792][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 749.807459][T30091] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.11208'. [ 749.847906][T30093] kvm: user requested TSC rate below hardware speed [ 749.923481][ T5885] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 750.085374][ T5885] usb 4-1: config 255 has too many interfaces: 223, using maximum allowed: 32 [ 750.095376][ T5885] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 223 [ 750.110995][ T5885] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 750.120986][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.130186][ T5885] usb 4-1: Product: syz [ 750.136244][ T5885] usb 4-1: Manufacturer: syz [ 750.141239][ T5885] usb 4-1: SerialNumber: syz [ 750.154363][ T5885] gspca_main: sq930x-2.14.0 probing 2770:930c [ 750.984550][ T5885] gspca_sq930x: ucbus_write failed -71 [ 751.006181][ T5885] sq930x 4-1:255.0: probe with driver sq930x failed with error -71 [ 751.040602][ T5885] usb 4-1: USB disconnect, device number 3 [ 751.463396][T30147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 752.587708][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.594308][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.663608][ T5915] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 752.829579][ T5915] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 752.845655][ T5915] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 752.864962][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 752.907834][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 752.930198][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 752.947990][ T5915] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 752.960225][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 752.984528][ T5915] usb 4-1: Product: syz [ 752.988761][ T5915] usb 4-1: Manufacturer: syz [ 753.029650][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 753.043456][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 753.079688][ T5915] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 753.088139][ T5915] cdc_wdm 4-1:1.0: Unknown control protocol [ 753.245779][ T5816] usb 4-1: USB disconnect, device number 4 [ 753.274131][T30233] tap0: tun_chr_ioctl cmd 1074025677 [ 753.279675][T30233] tap0: linktype set to 776 [ 753.357708][T30236] netlink: 'syz.0.11275': attribute type 16 has an invalid length. [ 754.351352][T30267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.253131][ T5888] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 756.406995][ T5888] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 756.416799][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.425836][ T5888] usb 2-1: Product: syz [ 756.430009][ T5888] usb 2-1: Manufacturer: syz [ 756.435816][ T5888] usb 2-1: SerialNumber: syz [ 756.451849][ T5888] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 756.470799][ T5915] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 756.796478][ T5816] hid-generic 0003:0004:0000.007F: unknown main item tag 0x0 [ 756.806614][ T5816] hid-generic 0003:0004:0000.007F: unknown main item tag 0x0 [ 756.814788][ T5816] hid-generic 0003:0004:0000.007F: unknown main item tag 0x0 [ 756.827877][ T5816] hid-generic 0003:0004:0000.007F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 756.915436][T30339] fido_id[30339]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 757.103434][ T5953] usb 2-1: USB disconnect, device number 81 [ 757.706849][ T5915] usb 2-1: Service connection timeout for: 256 [ 757.713928][ T5915] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 757.723969][ T5915] ath9k_htc: Failed to initialize the device [ 757.731588][ T5953] usb 2-1: ath9k_htc: USB layer deinitialized [ 757.888042][ T5816] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 758.049522][ T5816] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 758.062589][T30374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.070388][ T5816] usb 4-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 758.084120][ T5816] usb 4-1: config 0 has no interface number 0 [ 758.093394][ T5816] usb 4-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 758.112797][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.131095][ T5816] usb 4-1: Product: syz [ 758.136578][ T5816] usb 4-1: Manufacturer: syz [ 758.141765][ T5816] usb 4-1: SerialNumber: syz [ 758.151340][ T5816] usb 4-1: config 0 descriptor?? [ 758.163885][ T5816] cdc_acm 4-1:0.123: skipping garbage [ 758.169848][ T5816] cdc_acm 4-1:0.123: skipping garbage [ 758.364145][ T9] usb 4-1: USB disconnect, device number 5 [ 758.501470][T30382] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11340'. [ 758.512509][T30382] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11340'. [ 758.750211][T30390] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11344'. [ 759.224112][T30409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11353'. [ 763.337658][T30519] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 764.773907][T30554] [ 764.776301][T30554] ===================================================== [ 764.783258][T30554] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 764.790757][T30554] syzkaller #0 Not tainted [ 764.795196][T30554] ----------------------------------------------------- [ 764.802319][T30554] syz.0.11416/30554 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 764.810143][T30554] ffff888078c1baa0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 764.818880][T30554] [ 764.818880][T30554] and this task is already holding: [ 764.826257][T30554] ffff8880778627f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 764.835002][T30554] which would create a new lock dependency: [ 764.840899][T30554] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 764.848596][T30554] [ 764.848596][T30554] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 764.858048][T30554] (&client->buffer_lock){..-.}-{3:3} [ 764.858084][T30554] [ 764.858084][T30554] ... which became SOFTIRQ-irq-safe at: [ 764.871175][T30554] lock_acquire+0x120/0x360 [ 764.875780][T30554] _raw_spin_lock+0x2e/0x40 [ 764.880385][T30554] evdev_pass_values+0xb9/0xbd0 [ 764.885330][T30554] evdev_events+0x1e6/0x340 [ 764.889937][T30554] input_pass_values+0x288/0x890 [ 764.894967][T30554] input_event_dispose+0x330/0x6b0 [ 764.900171][T30554] input_event+0x89/0xe0 [ 764.904507][T30554] xpad360_process_packet+0x641/0xdd0 [ 764.909974][T30554] xpad_irq_in+0x14e/0x2590 [ 764.914595][T30554] __usb_hcd_giveback_urb+0x376/0x540 [ 764.920064][T30554] dummy_timer+0x85f/0x44c0 [ 764.924665][T30554] __hrtimer_run_queues+0x52c/0xc60 [ 764.929958][T30554] hrtimer_run_softirq+0x187/0x2b0 [ 764.935192][T30554] handle_softirqs+0x286/0x870 [ 764.940058][T30554] __irq_exit_rcu+0xca/0x1f0 [ 764.944751][T30554] irq_exit_rcu+0x9/0x30 [ 764.949095][T30554] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 764.954828][T30554] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 764.960912][T30554] unwind_next_frame+0x17e7/0x2390 [ 764.966166][T30554] arch_stack_walk+0x11c/0x150 [ 764.971037][T30554] stack_trace_save+0x9c/0xe0 [ 764.975819][T30554] kasan_save_track+0x3e/0x80 [ 764.980606][T30554] __kasan_kmalloc+0x93/0xb0 [ 764.985306][T30554] __kmalloc_noprof+0x411/0x7f0 [ 764.990264][T30554] usb_alloc_urb+0x46/0x150 [ 764.994871][T30554] usb_control_msg+0x118/0x3e0 [ 764.999733][T30554] usb_control_msg_recv+0xd2/0x170 [ 765.004950][T30554] xpad_start_input+0x234/0x2f0 [ 765.009894][T30554] input_open_device+0x1d3/0x390 [ 765.014926][T30554] evdev_open+0x4b1/0x5b0 [ 765.019352][T30554] chrdev_open+0x4cc/0x5e0 [ 765.023878][T30554] do_dentry_open+0x953/0x13f0 [ 765.028735][T30554] vfs_open+0x3b/0x340 [ 765.032903][T30554] path_openat+0x2ee5/0x3830 [ 765.037611][T30554] do_filp_open+0x1fa/0x410 [ 765.042237][T30554] do_sys_openat2+0x121/0x1c0 [ 765.047046][T30554] __x64_sys_openat+0x138/0x170 [ 765.052014][T30554] do_syscall_64+0xfa/0xfa0 [ 765.056640][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.062656][T30554] [ 765.062656][T30554] to a SOFTIRQ-irq-unsafe lock: [ 765.069793][T30554] (tasklist_lock){.+.+}-{3:3} [ 765.069830][T30554] [ 765.069830][T30554] ... which became SOFTIRQ-irq-unsafe at: [ 765.082498][T30554] ... [ 765.082512][T30554] lock_acquire+0x120/0x360 [ 765.089808][T30554] _raw_read_lock+0x36/0x50 [ 765.094424][T30554] __do_wait+0xde/0x740 [ 765.098683][T30554] do_wait+0x1f8/0x510 [ 765.102866][T30554] kernel_wait+0xab/0x170 [ 765.107307][T30554] call_usermodehelper_exec_work+0xbe/0x230 [ 765.113293][T30554] process_scheduled_works+0xae1/0x17b0 [ 765.118930][T30554] worker_thread+0x8a0/0xda0 [ 765.123659][T30554] kthread+0x711/0x8a0 [ 765.127828][T30554] ret_from_fork+0x4bc/0x870 [ 765.132511][T30554] ret_from_fork_asm+0x1a/0x30 [ 765.137407][T30554] [ 765.137407][T30554] other info that might help us debug this: [ 765.137407][T30554] [ 765.147663][T30554] Chain exists of: [ 765.147663][T30554] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 765.147663][T30554] [ 765.160817][T30554] Possible interrupt unsafe locking scenario: [ 765.160817][T30554] [ 765.169152][T30554] CPU0 CPU1 [ 765.174523][T30554] ---- ---- [ 765.179982][T30554] lock(tasklist_lock); [ 765.184275][T30554] local_irq_disable(); [ 765.191034][T30554] lock(&client->buffer_lock); [ 765.198411][T30554] lock(&new->fa_lock); [ 765.205183][T30554] [ 765.208642][T30554] lock(&client->buffer_lock); [ 765.213679][T30554] [ 765.213679][T30554] *** DEADLOCK *** [ 765.213679][T30554] [ 765.221825][T30554] 3 locks held by syz.0.11416/30554: [ 765.227111][T30554] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xbe/0x550 [ 765.236810][T30554] #1: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 765.245900][T30554] #2: ffff8880778627f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 765.255239][T30554] [ 765.255239][T30554] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 765.265909][T30554] -> (&client->buffer_lock){..-.}-{3:3} { [ 765.271752][T30554] IN-SOFTIRQ-W at: [ 765.275827][T30554] lock_acquire+0x120/0x360 [ 765.282163][T30554] _raw_spin_lock+0x2e/0x40 [ 765.288519][T30554] evdev_pass_values+0xb9/0xbd0 [ 765.295209][T30554] evdev_events+0x1e6/0x340 [ 765.301633][T30554] input_pass_values+0x288/0x890 [ 765.308402][T30554] input_event_dispose+0x330/0x6b0 [ 765.315348][T30554] input_event+0x89/0xe0 [ 765.321417][T30554] xpad360_process_packet+0x641/0xdd0 [ 765.328695][T30554] xpad_irq_in+0x14e/0x2590 [ 765.335031][T30554] __usb_hcd_giveback_urb+0x376/0x540 [ 765.342240][T30554] dummy_timer+0x85f/0x44c0 [ 765.348670][T30554] __hrtimer_run_queues+0x52c/0xc60 [ 765.355711][T30554] hrtimer_run_softirq+0x187/0x2b0 [ 765.362832][T30554] handle_softirqs+0x286/0x870 [ 765.369561][T30554] __irq_exit_rcu+0xca/0x1f0 [ 765.375989][T30554] irq_exit_rcu+0x9/0x30 [ 765.382072][T30554] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 765.389547][T30554] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 765.397370][T30554] unwind_next_frame+0x17e7/0x2390 [ 765.404320][T30554] arch_stack_walk+0x11c/0x150 [ 765.410923][T30554] stack_trace_save+0x9c/0xe0 [ 765.417438][T30554] kasan_save_track+0x3e/0x80 [ 765.423957][T30554] __kasan_kmalloc+0x93/0xb0 [ 765.430388][T30554] __kmalloc_noprof+0x411/0x7f0 [ 765.437078][T30554] usb_alloc_urb+0x46/0x150 [ 765.443508][T30554] usb_control_msg+0x118/0x3e0 [ 765.450112][T30554] usb_control_msg_recv+0xd2/0x170 [ 765.457071][T30554] xpad_start_input+0x234/0x2f0 [ 765.463754][T30554] input_open_device+0x1d3/0x390 [ 765.470534][T30554] evdev_open+0x4b1/0x5b0 [ 765.476725][T30554] chrdev_open+0x4cc/0x5e0 [ 765.483117][T30554] do_dentry_open+0x953/0x13f0 [ 765.489747][T30554] vfs_open+0x3b/0x340 [ 765.495663][T30554] path_openat+0x2ee5/0x3830 [ 765.502126][T30554] do_filp_open+0x1fa/0x410 [ 765.508462][T30554] do_sys_openat2+0x121/0x1c0 [ 765.514973][T30554] __x64_sys_openat+0x138/0x170 [ 765.521660][T30554] do_syscall_64+0xfa/0xfa0 [ 765.528016][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.535832][T30554] INITIAL USE at: [ 765.539819][T30554] lock_acquire+0x120/0x360 [ 765.546063][T30554] _raw_spin_lock+0x2e/0x40 [ 765.552330][T30554] evdev_handle_get_val+0x70/0x9f0 [ 765.559217][T30554] evdev_ioctl_handler+0x1202/0x1f10 [ 765.566352][T30554] __se_sys_ioctl+0xfc/0x170 [ 765.572707][T30554] do_syscall_64+0xfa/0xfa0 [ 765.578984][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.586634][T30554] } [ 765.589228][T30554] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 765.597481][T30554] -> (&new->fa_lock){....}-{3:3} { [ 765.602623][T30554] INITIAL USE at: [ 765.606534][T30554] lock_acquire+0x120/0x360 [ 765.612610][T30554] _raw_write_lock_irq+0xa2/0xf0 [ 765.619140][T30554] fasync_remove_entry+0xf1/0x1c0 [ 765.625751][T30554] pipe_fasync+0xa9/0x1e0 [ 765.631654][T30554] __fput+0x8a2/0xa70 [ 765.637206][T30554] task_work_run+0x1d4/0x260 [ 765.643375][T30554] exit_to_user_mode_loop+0xe9/0x130 [ 765.650225][T30554] do_syscall_64+0x2bd/0xfa0 [ 765.656400][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.663861][T30554] INITIAL READ USE at: [ 765.668230][T30554] lock_acquire+0x120/0x360 [ 765.674748][T30554] _raw_read_lock_irqsave+0xaf/0x100 [ 765.682235][T30554] kill_fasync+0x199/0x4d0 [ 765.688782][T30554] pipe_release+0x19c/0x330 [ 765.695302][T30554] __fput+0x44c/0xa70 [ 765.701297][T30554] task_work_run+0x1d4/0x260 [ 765.707918][T30554] exit_to_user_mode_loop+0xe9/0x130 [ 765.715405][T30554] do_syscall_64+0x2bd/0xfa0 [ 765.722022][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.729946][T30554] } [ 765.732465][T30554] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 765.741212][T30554] ... acquired at: [ 765.745049][T30554] lock_acquire+0x120/0x360 [ 765.749750][T30554] _raw_read_lock_irqsave+0xaf/0x100 [ 765.755410][T30554] kill_fasync+0x199/0x4d0 [ 765.760016][T30554] evdev_pass_values+0x627/0xbd0 [ 765.765145][T30554] evdev_events+0x1e6/0x340 [ 765.769851][T30554] input_pass_values+0x288/0x890 [ 765.774984][T30554] input_event_dispose+0x330/0x6b0 [ 765.780285][T30554] input_inject_event+0x1dd/0x340 [ 765.785585][T30554] evdev_write+0x2fc/0x480 [ 765.790205][T30554] vfs_write+0x27e/0xb30 [ 765.794660][T30554] ksys_write+0x145/0x250 [ 765.799180][T30554] do_syscall_64+0xfa/0xfa0 [ 765.803887][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.809974][T30554] [ 765.812323][T30554] [ 765.812323][T30554] the dependencies between the lock to be acquired [ 765.812339][T30554] and SOFTIRQ-irq-unsafe lock: [ 765.825911][T30554] -> (tasklist_lock){.+.+}-{3:3} { [ 765.831152][T30554] HARDIRQ-ON-R at: [ 765.835232][T30554] lock_acquire+0x120/0x360 [ 765.841586][T30554] _raw_read_lock+0x36/0x50 [ 765.847946][T30554] __do_wait+0xde/0x740 [ 765.853978][T30554] do_wait+0x1f8/0x510 [ 765.859911][T30554] kernel_wait+0xab/0x170 [ 765.866094][T30554] call_usermodehelper_exec_work+0xbe/0x230 [ 765.873921][T30554] process_scheduled_works+0xae1/0x17b0 [ 765.881391][T30554] worker_thread+0x8a0/0xda0 [ 765.887832][T30554] kthread+0x711/0x8a0 [ 765.893752][T30554] ret_from_fork+0x4bc/0x870 [ 765.900262][T30554] ret_from_fork_asm+0x1a/0x30 [ 765.906855][T30554] SOFTIRQ-ON-R at: [ 765.910938][T30554] lock_acquire+0x120/0x360 [ 765.917273][T30554] _raw_read_lock+0x36/0x50 [ 765.923658][T30554] __do_wait+0xde/0x740 [ 765.929654][T30554] do_wait+0x1f8/0x510 [ 765.935558][T30554] kernel_wait+0xab/0x170 [ 765.941727][T30554] call_usermodehelper_exec_work+0xbe/0x230 [ 765.949450][T30554] process_scheduled_works+0xae1/0x17b0 [ 765.956837][T30554] worker_thread+0x8a0/0xda0 [ 765.963283][T30554] kthread+0x711/0x8a0 [ 765.969188][T30554] ret_from_fork+0x4bc/0x870 [ 765.975695][T30554] ret_from_fork_asm+0x1a/0x30 [ 765.982295][T30554] INITIAL USE at: [ 765.986380][T30554] lock_acquire+0x120/0x360 [ 765.992629][T30554] _raw_write_lock_irq+0xa2/0xf0 [ 765.999416][T30554] copy_process+0x224f/0x3c00 [ 766.005849][T30554] kernel_clone+0x21e/0x840 [ 766.012102][T30554] user_mode_thread+0xdd/0x140 [ 766.018611][T30554] rest_init+0x23/0x300 [ 766.024511][T30554] start_kernel+0x3ae/0x410 [ 766.030759][T30554] x86_64_start_reservations+0x24/0x30 [ 766.037970][T30554] x86_64_start_kernel+0x143/0x1c0 [ 766.044836][T30554] common_startup_64+0x13e/0x147 [ 766.051527][T30554] INITIAL READ USE at: [ 766.055945][T30554] lock_acquire+0x120/0x360 [ 766.062694][T30554] _raw_read_lock+0x36/0x50 [ 766.069415][T30554] __do_wait+0xde/0x740 [ 766.075757][T30554] do_wait+0x1f8/0x510 [ 766.082015][T30554] kernel_wait+0xab/0x170 [ 766.088531][T30554] call_usermodehelper_exec_work+0xbe/0x230 [ 766.096606][T30554] process_scheduled_works+0xae1/0x17b0 [ 766.104339][T30554] worker_thread+0x8a0/0xda0 [ 766.111112][T30554] kthread+0x711/0x8a0 [ 766.117362][T30554] ret_from_fork+0x4bc/0x870 [ 766.124217][T30554] ret_from_fork_asm+0x1a/0x30 [ 766.131159][T30554] } [ 766.133745][T30554] ... key at: [] tasklist_lock+0x18/0x40 [ 766.141568][T30554] ... acquired at: [ 766.145461][T30554] lock_acquire+0x120/0x360 [ 766.150144][T30554] _raw_read_lock+0x36/0x50 [ 766.154833][T30554] send_sigurg+0x12b/0x420 [ 766.159435][T30554] sk_send_sigurg+0x6c/0x2e0 [ 766.164208][T30554] queue_oob+0x420/0x4f0 [ 766.168639][T30554] unix_stream_sendmsg+0xc3f/0xdf0 [ 766.173934][T30554] __sock_sendmsg+0x21c/0x270 [ 766.178798][T30554] ____sys_sendmsg+0x52d/0x830 [ 766.183748][T30554] ___sys_sendmsg+0x21f/0x2a0 [ 766.188607][T30554] __sys_sendmmsg+0x227/0x430 [ 766.193555][T30554] __x64_sys_sendmmsg+0xa0/0xc0 [ 766.198762][T30554] do_syscall_64+0xfa/0xfa0 [ 766.203452][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.209526][T30554] [ 766.211865][T30554] -> (&f_owner->lock){....}-{3:3} { [ 766.217096][T30554] INITIAL USE at: [ 766.221000][T30554] lock_acquire+0x120/0x360 [ 766.227077][T30554] _raw_write_lock_irq+0xa2/0xf0 [ 766.233595][T30554] __f_setown+0x67/0x370 [ 766.239410][T30554] generic_setlease+0xd60/0x1240 [ 766.245926][T30554] fcntl_setlease+0x3a2/0x4c0 [ 766.252791][T30554] do_fcntl+0x6a9/0x1910 [ 766.258615][T30554] __se_sys_fcntl+0xc8/0x150 [ 766.264871][T30554] do_syscall_64+0xfa/0xfa0 [ 766.270952][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.278416][T30554] INITIAL READ USE at: [ 766.282761][T30554] lock_acquire+0x120/0x360 [ 766.289284][T30554] _raw_read_lock_irqsave+0xaf/0x100 [ 766.296582][T30554] send_sigio+0x38/0x370 [ 766.302835][T30554] dnotify_handle_event+0x169/0x440 [ 766.310057][T30554] fsnotify+0x1814/0x1a80 [ 766.316391][T30554] vfs_set_acl+0xa43/0xb00 [ 766.322826][T30554] filename_setxattr+0x2e0/0x600 [ 766.329807][T30554] path_setxattrat+0x364/0x3a0 [ 766.336592][T30554] __x64_sys_setxattr+0xbc/0xe0 [ 766.343450][T30554] do_syscall_64+0xfa/0xfa0 [ 766.349964][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.357864][T30554] } [ 766.360385][T30554] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 766.369248][T30554] ... acquired at: [ 766.373060][T30554] lock_acquire+0x120/0x360 [ 766.377746][T30554] _raw_read_lock_irqsave+0xaf/0x100 [ 766.383232][T30554] send_sigio+0x38/0x370 [ 766.387691][T30554] kill_fasync+0x24d/0x4d0 [ 766.392316][T30554] sock_wake_async+0x137/0x160 [ 766.397391][T30554] sock_def_readable+0x3bb/0x550 [ 766.402524][T30554] queue_oob+0x452/0x4f0 [ 766.406971][T30554] unix_stream_sendmsg+0xc3f/0xdf0 [ 766.412271][T30554] __sock_sendmsg+0x21c/0x270 [ 766.417139][T30554] ____sys_sendmsg+0x52d/0x830 [ 766.422088][T30554] ___sys_sendmsg+0x21f/0x2a0 [ 766.426953][T30554] __sys_sendmmsg+0x227/0x430 [ 766.431814][T30554] __x64_sys_sendmmsg+0xa0/0xc0 [ 766.436871][T30554] do_syscall_64+0xfa/0xfa0 [ 766.441572][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.447644][T30554] [ 766.449975][T30554] [ 766.449975][T30554] stack backtrace: [ 766.455873][T30554] CPU: 1 UID: 0 PID: 30554 Comm: syz.0.11416 Not tainted syzkaller #0 PREEMPT(full) [ 766.455896][T30554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.455909][T30554] Call Trace: [ 766.455919][T30554] [ 766.455927][T30554] dump_stack_lvl+0x189/0x250 [ 766.455962][T30554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.455987][T30554] ? __pfx__printk+0x10/0x10 [ 766.456010][T30554] validate_chain+0x1f05/0x2140 [ 766.456041][T30554] __lock_acquire+0xab9/0xd20 [ 766.456061][T30554] ? send_sigio+0x38/0x370 [ 766.456081][T30554] lock_acquire+0x120/0x360 [ 766.456097][T30554] ? send_sigio+0x38/0x370 [ 766.456123][T30554] _raw_read_lock_irqsave+0xaf/0x100 [ 766.456148][T30554] ? send_sigio+0x38/0x370 [ 766.456168][T30554] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 766.456193][T30554] ? _raw_read_lock_irqsave+0xbb/0x100 [ 766.456217][T30554] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 766.456243][T30554] send_sigio+0x38/0x370 [ 766.456265][T30554] kill_fasync+0x24d/0x4d0 [ 766.456286][T30554] ? kill_fasync+0x53/0x4d0 [ 766.456308][T30554] sock_wake_async+0x137/0x160 [ 766.456335][T30554] sock_def_readable+0x3bb/0x550 [ 766.456360][T30554] ? sock_def_readable+0xbe/0x550 [ 766.456385][T30554] queue_oob+0x452/0x4f0 [ 766.456410][T30554] ? __pfx_queue_oob+0x10/0x10 [ 766.456435][T30554] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 766.456457][T30554] unix_stream_sendmsg+0xc3f/0xdf0 [ 766.456479][T30554] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.456508][T30554] ? trace_sched_exit_tp+0x36/0x110 [ 766.456534][T30554] ? __schedule+0x17ae/0x4cc0 [ 766.456559][T30554] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 766.456585][T30554] ? aa_sock_msg_perm+0xda/0x1d0 [ 766.456613][T30554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 766.456630][T30554] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 766.456652][T30554] __sock_sendmsg+0x21c/0x270 [ 766.456677][T30554] ____sys_sendmsg+0x52d/0x830 [ 766.456701][T30554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.456724][T30554] ? import_iovec+0x74/0xa0 [ 766.456748][T30554] ___sys_sendmsg+0x21f/0x2a0 [ 766.456768][T30554] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.456801][T30554] ? __fget_files+0x2a/0x420 [ 766.456817][T30554] ? __fget_files+0x3a0/0x420 [ 766.456838][T30554] __sys_sendmmsg+0x227/0x430 [ 766.456859][T30554] ? __pfx___sys_sendmmsg+0x10/0x10 [ 766.456882][T30554] ? __pfx_do_futex+0x10/0x10 [ 766.456921][T30554] __x64_sys_sendmmsg+0xa0/0xc0 [ 766.456947][T30554] do_syscall_64+0xfa/0xfa0 [ 766.456973][T30554] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.456998][T30554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.457016][T30554] ? clear_bhb_loop+0x60/0xb0 [ 766.457036][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.457054][T30554] RIP: 0033:0x7f8aa018f749 [ 766.457071][T30554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.457087][T30554] RSP: 002b:00007f8aa1048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 766.457106][T30554] RAX: ffffffffffffffda RBX: 00007f8aa03e5fa0 RCX: 00007f8aa018f749 [ 766.457120][T30554] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 766.457132][T30554] RBP: 00007f8aa0213f91 R08: 0000000000000000 R09: 0000000000000000 [ 766.457144][T30554] R10: 00000000000408b1 R11: 0000000000000246 R12: 0000000000000000 [ 766.457155][T30554] R13: 00007f8aa03e6038 R14: 00007f8aa03e5fa0 R15: 00007f8aa050fa28 [ 766.457176][T30554] [ 766.791717][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.873160][ T5816] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 767.038446][ T5816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.051100][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 767.062156][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 767.072087][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 767.086721][ T5816] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 767.095951][ T5816] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 767.104040][ T5816] usb 4-1: Manufacturer: syz [ 767.110403][ T5816] usb 4-1: config 0 descriptor?? [ 767.374077][ T5816] rc_core: IR keymap rc-hauppauge not found [ 767.380027][ T5816] Registered IR keymap rc-empty [ 767.385130][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.422570][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.453068][ T5816] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 767.466768][ T5816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input83 [ 767.480455][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.502461][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.532541][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.552412][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.572513][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.592470][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.612486][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.632542][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.652428][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.672413][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.693636][ T5816] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 767.702858][ T5816] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 767.772480][ T5816] usb 4-1: USB disconnect, device number 6